cybernews

CVE-2025-9610 - Code-projects Online Event Judging System SQL Injection

CVE ID : CVE-2025-9610
Published : Aug. 29, 2025, 4:16 a.m. | 45 minutes ago
Description : A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown processing of the file /create_account.php. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Other parameters might be affected as well.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 04:16:00 GMT

CVE-2025-9619 - Mercatus ERP Remote Resource ID Manipulation Vulnerability

CVE ID : CVE-2025-9619
Published : Aug. 29, 2025, 4:16 a.m. | 45 minutes ago
Description : A security flaw has been discovered in E4 Sistemas Mercatus ERP 2.00.019. The affected element is an unknown function of the file /basico/webservice/imprimir-danfe/id/. Performing manipulation results in improper control of resource identifiers. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 04:16:00 GMT

CVE-2025-9639 - Ai3 QbiCRMGateway Arbitrary File Reading Vulnerability

CVE ID : CVE-2025-9639
Published : Aug. 29, 2025, 4:16 a.m. | 45 minutes ago
Description : The QbiCRMGateway developed by Ai3 has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 04:16:00 GMT

CVE-2025-8857 - Changing Clinic Image System Hard-Coded Credentials Vulnerability

CVE ID : CVE-2025-8857
Published : Aug. 29, 2025, 4:15 a.m. | 45 minutes ago
Description : Clinic Image System developed by Changing contains hard-coded Credentials, allowing unauthenticated remote attackers to log into the system using administrator credentials embedded in the source code.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 04:15:00 GMT

CVE-2025-8858 - Changing Clinic Image System SQL Injection Vulnerability

CVE ID : CVE-2025-8858
Published : Aug. 29, 2025, 4:15 a.m. | 45 minutes ago
Description : Clinic Image System developed by Changing has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 04:15:00 GMT

CVE-2025-8861 - "Changing TSA Missing Authentication Vulnerability"

CVE ID : CVE-2025-8861
Published : Aug. 29, 2025, 4:15 a.m. | 45 minutes ago
Description : TSA developed by Changing has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 04:15:00 GMT

CVE-2025-9609 - Portabilis i-Educar Improper Authorization Remote Code Execution

CVE ID : CVE-2025-9609
Published : Aug. 29, 2025, 4:15 a.m. | 45 minutes ago
Description : A vulnerability was found in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /educacenso/consulta. The manipulation results in improper authorization. The attack can be executed remotely. The exploit has been made public and could be used.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 04:15:00 GMT

CVE-2025-39245 - HikCentral Master Lite CSV Injection Vulnerability

CVE ID : CVE-2025-39245
Published : Aug. 29, 2025, 3:15 a.m. | 1 hour, 45 minutes ago
Description : There is a CSV Injection Vulnerability in some HikCentral Master Lite versions. This could allow an attacker to inject executable commands via malicious CSV data.
Severity: 4.7 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 03:15:00 GMT

CVE-2025-39246 - HikCentral FocSign Unquoted Service Path Privilege Escalation Vulnerability

CVE ID : CVE-2025-39246
Published : Aug. 29, 2025, 3:15 a.m. | 1 hour, 45 minutes ago
Description : There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 03:15:00 GMT

CVE-2025-39247 - HikCentral Professional Unauthenticated Privilege Escalation

CVE ID : CVE-2025-39247
Published : Aug. 29, 2025, 3:15 a.m. | 1 hour, 45 minutes ago
Description : There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.
Severity: 8.6 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 03:15:00 GMT

CVE-2025-58323 - NAVER MYBOX Explorer Windows Privilege Escalation Vulnerability

CVE ID : CVE-2025-58323
Published : Aug. 29, 2025, 3:15 a.m. | 1 hour, 45 minutes ago
Description : NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by executing arbitrary files due to improper privilege checks.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 03:15:00 GMT

CVE-2025-58326 - Apache HTTP Server Unvalidated User Input

CVE ID : CVE-2025-58326
Published : Aug. 29, 2025, 3:15 a.m. | 1 hour, 45 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 03:15:00 GMT

CVE-2025-58327 - Apache HTTP Server Cross-Site Request Forgery

CVE ID : CVE-2025-58327
Published : Aug. 29, 2025, 3:15 a.m. | 1 hour, 45 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 03:15:00 GMT

CVE-2025-58328 - Apache HTTP Server Unvalidated User Input

CVE ID : CVE-2025-58328
Published : Aug. 29, 2025, 3:15 a.m. | 1 hour, 45 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 03:15:00 GMT

CVE-2025-58329 - Oracle WebLogic Server Deserialization RCE

CVE ID : CVE-2025-58329
Published : Aug. 29, 2025, 3:15 a.m. | 1 hour, 45 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 03:15:00 GMT

CVE-2025-58330 - Apache HTTP Server Unvalidated User Input

CVE ID : CVE-2025-58330
Published : Aug. 29, 2025, 3:15 a.m. | 1 hour, 45 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 03:15:00 GMT

CVE-2025-58331 - Apache HTTP Server Unvalidated User Input

CVE ID : CVE-2025-58331
Published : Aug. 29, 2025, 3:15 a.m. | 1 hour, 45 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 03:15:00 GMT

CVE-2025-58332 - Apache HTTP Server Command Injection Vulnerability

CVE ID : CVE-2025-58332
Published : Aug. 29, 2025, 3:15 a.m. | 1 hour, 45 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 03:15:00 GMT

CVE-2025-58333 - Apache HTTPD Cross-Site Request Forgery

CVE ID : CVE-2025-58333
Published : Aug. 29, 2025, 3:15 a.m. | 1 hour, 45 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 03:15:00 GMT

CVE-2025-9605 - Tenda AC21/AC23 Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-9605
Published : Aug. 29, 2025, 3:15 a.m. | 1 hour, 45 minutes ago
Description : A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Severity: 10.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 03:15:00 GMT

CVE-2025-9606 - Portabilis i-Educar SQL Injection Vulnerability

CVE ID : CVE-2025-9606
Published : Aug. 29, 2025, 3:15 a.m. | 1 hour, 45 minutes ago
Description : A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/agenda_preferencias.php. Performing manipulation of the argument cod_agenda results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 03:15:00 GMT

CVE-2025-9607 - Portabilis i-Educar SQL Injection Vulnerability

CVE ID : CVE-2025-9607
Published : Aug. 29, 2025, 3:15 a.m. | 1 hour, 45 minutes ago
Description : A flaw has been found in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /module/TabelaArredondamento/view of the component Tabelas de Arredondamento Page. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 03:15:00 GMT

CVE-2025-9608 - Portabilis i-Educar Formula de Cálculo de Média Page SQL Injection

CVE ID : CVE-2025-9608
Published : Aug. 29, 2025, 3:15 a.m. | 1 hour, 45 minutes ago
Description : A vulnerability has been found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/FormulaMedia/view of the component Formula de Cálculo de Média Page. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 03:15:00 GMT

CVE-2025-9603 - Telesquare TLR-2005KSH Command Injection Vulnerability

CVE ID : CVE-2025-9603
Published : Aug. 29, 2025, 2:15 a.m. | 2 hours, 45 minutes ago
Description : A vulnerability was determined in Telesquare TLR-2005KSH 1.2.4. The affected element is an unknown function of the file /cgi-bin/internet.cgi?Command=lanCfg. Executing manipulation of the argument Hostname can lead to command injection. The attack may be performed from a remote location. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 02:15:00 GMT

CVE-2025-9604 - Coze-Studio Hardcoded Cryptographic Key Vulnerability

CVE ID : CVE-2025-9604
Published : Aug. 29, 2025, 2:15 a.m. | 2 hours, 45 minutes ago
Description : A vulnerability was identified in coze-studio up to 0.2.4. The impacted element is an unknown function of the file backend/domain/plugin/encrypt/aes.go. The manipulation of the argument AuthSecretKey/StateSecretKey/OAuthTokenSecretKey leads to use of hard-coded cryptographic key . It is possible to initiate the attack remotely. The attack is considered to have high complexity. The exploitability is regarded as difficult. To fix this issue, it is recommended to deploy a patch. The vendor replied to the GitHub issue (translated from simplified Chinese): "For scenarios requiring encryption, we will implement user-defined key management through configuration and optimize the use of encryption tools, such as random salt."
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 02:15:00 GMT

CVE-2025-9601 - iSourcecode Apartment Management System SQL Injection

CVE ID : CVE-2025-9601
Published : Aug. 29, 2025, 2:15 a.m. | 1 hour, 4 minutes ago
Description : A vulnerability was detected in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /setting/employee_salary_setup.php. The manipulation of the argument ddlEmpName results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 02:15:00 GMT

CVE-2025-9602 - Xinhu RockOA Remote Authorization Bypass

CVE ID : CVE-2025-9602
Published : Aug. 29, 2025, 2:15 a.m. | 1 hour, 4 minutes ago
Description : A vulnerability was found in Xinhu RockOA up to 2.6.9. Impacted is the function publicsaveAjax of the file /index.php. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 02:15:00 GMT

CVE-2024-44271 - Apple macOS Sequoia Screen Recording Vulnerability

CVE ID : CVE-2024-44271
Published : Aug. 29, 2025, 1:15 a.m. | 2 hours, 4 minutes ago
Description : The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 01:15:00 GMT

CVE-2024-54554 - "Apple macOS Sequoia Symlink Data Access Vulnerability"

CVE ID : CVE-2024-54554
Published : Aug. 29, 2025, 1:15 a.m. | 2 hours, 4 minutes ago
Description : This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 01:15:00 GMT

CVE-2024-54568 - "Apple macOS Sequoia Unexpected App Termination Vulnerability"

CVE ID : CVE-2024-54568
Published : Aug. 29, 2025, 1:15 a.m. | 2 hours, 4 minutes ago
Description : The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. Parsing a maliciously crafted file may lead to an unexpected app termination.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 01:15:00 GMT

CVE-2025-40927 - Perl CGI::Simple HTTP Response Splitting Vulnerability

CVE ID : CVE-2025-40927
Published : Aug. 29, 2025, 1:15 a.m. | 2 hours, 4 minutes ago
Description : CGI::Simple versions before 1.282 for Perl has a HTTP response splitting flaw This vulnerability is a confirmed HTTP response splitting flaw in CGI::Simple that allows HTTP response header injection, which can be used for reflected XSS or open redirect under certain conditions. Although some validation exists, it can be bypassed using URL-encoded values, allowing an attacker to inject untrusted content into the response via query parameters. As a result, an attacker can inject a line break (e.g. %0A) into the parameter value, causing the server to split the HTTP response and inject arbitrary headers or even an HTML/JavaScript body, leading to reflected cross-site scripting (XSS), open redirect or other attacks. The issue documented in CVE-2010-4410 https://www.cve.org/CVERecord?id=CVE-2010-4410 is related but the fix was incomplete. Impact By injecting %0A (newline) into a query string parameter, an attacker can: * Break the current HTTP header * Inject a new header or entire body * Deliver a script payload that is reflected in the server’s response That can lead to the following attacks: * reflected XSS * open redirect * cache poisoning * header manipulation
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 01:15:00 GMT

CVE-2025-43187 - Apple macOS HDIUTIL Code Execution Vulnerability

CVE ID : CVE-2025-43187
Published : Aug. 29, 2025, 1:15 a.m. | 2 hours, 4 minutes ago
Description : This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.6. Running an hdiutil command may unexpectedly execute arbitrary code.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 01:15:00 GMT

CVE-2025-43255 - Apple macOS IOMemoryDescriptor Out-of-Bounds Read Vulnerability

CVE ID : CVE-2025-43255
Published : Aug. 29, 2025, 1:15 a.m. | 2 hours, 4 minutes ago
Description : An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.7.7, macOS Sequoia 15.6, macOS Ventura 13.7.7. An app may be able to cause unexpected system termination.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 01:15:00 GMT

CVE-2025-43268 - Apple macOS Sequoia Root Privilege Escalation

CVE ID : CVE-2025-43268
Published : Aug. 29, 2025, 1:15 a.m. | 2 hours, 4 minutes ago
Description : A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A malicious app may be able to gain root privileges.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 01:15:00 GMT

CVE-2025-43284 - Apple macOS Out-of-Bounds Read Vulnerability

CVE ID : CVE-2025-43284
Published : Aug. 29, 2025, 1:15 a.m. | 2 hours, 4 minutes ago
Description : An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.6. An app may be able to cause unexpected system termination.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 01:15:00 GMT

CVE-2025-54142 - Akamai Ghost HTTP Request Smuggling

CVE ID : CVE-2025-54142
Published : Aug. 29, 2025, 1:15 a.m. | 2 hours, 4 minutes ago
Description : Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because there can be a subsequent request within the persistent connection between an Akamai proxy server and an origin server, if the origin server violates certain Internet standards.
Severity: 4.0 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 01:15:00 GMT

CVE-2025-9599 - iSourcecode Apartment Management System SQL Injection

CVE ID : CVE-2025-9599
Published : Aug. 29, 2025, 1:15 a.m. | 2 hours, 4 minutes ago
Description : A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/month_setup.php. Executing manipulation of the argument txtMonthName can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 01:15:00 GMT

CVE-2025-9600 - "Isourcecode Apartment Management System SQL Injection Vulnerability"

CVE ID : CVE-2025-9600
Published : Aug. 29, 2025, 1:15 a.m. | 2 hours, 4 minutes ago
Description : A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/member_type_setup.php. The manipulation of the argument txtMemberType leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 01:15:00 GMT

CVE-2025-48979 - "UISP Command Injection Vulnerability"

CVE ID : CVE-2025-48979
Published : Aug. 29, 2025, 12:15 a.m. | 3 hours, 4 minutes ago
Description : An Improper Input Validation in UISP Application could allow a Command Injection by a malicious actor with High Privileges and local access.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 00:15:00 GMT

CVE-2025-9595 - Code-projects Student Information Management System Cross Site Scripting Vulnerability

CVE ID : CVE-2025-9595
Published : Aug. 29, 2025, 12:15 a.m. | 3 hours, 4 minutes ago
Description : A vulnerability was found in code-projects Student Information Management System 1.0. The impacted element is an unknown function of the file /login.php. The manipulation of the argument uname results in cross site scripting. The attack may be performed from a remote location. The exploit has been made public and could be used.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 00:15:00 GMT

CVE-2025-9596 - iSourcecode Sports Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9596
Published : Aug. 29, 2025, 12:15 a.m. | 3 hours, 4 minutes ago
Description : A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /login.php. This manipulation of the argument User causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 00:15:00 GMT

CVE-2025-9597 - Itsoucecode Apartment Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9597
Published : Aug. 29, 2025, 12:15 a.m. | 3 hours, 4 minutes ago
Description : A vulnerability was identified in itsourcecode Apartment Management System 1.0. This impacts an unknown function of the file /o_dashboard/rented_all_info.php. Such manipulation of the argument uid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 00:15:00 GMT

CVE-2025-9598 - Apache Management System SQL Injection

CVE ID : CVE-2025-9598
Published : Aug. 29, 2025, 12:15 a.m. | 3 hours, 4 minutes ago
Description : A security flaw has been discovered in itsourcecode Apartment Management System 1.0. Affected is an unknown function of the file /setting/year_setup.php. Performing manipulation of the argument txtXYear results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 29 Aug 2025 00:15:00 GMT

CVE-2025-58062 - OpenMCP Client OS Command Injection Vulnerability

CVE ID : CVE-2025-58062
Published : Aug. 28, 2025, 11:15 p.m. | 4 hours, 4 minutes ago
Description : LSTM-Kirigaya's openmcp-client is a vscode plugin for mcp developer. Prior to version 0.1.12, when users on a Windows platform connect to an attacker controlled MCP server, attackers could provision a malicious authorization server endpoint to silently achieve an OS command injection attack in the open() invocation, leading to client system compromise. This issue has been patched in version 0.1.12.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 23:15:00 GMT

CVE-2025-9593 - iSourcecode Apartment Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9593
Published : Aug. 28, 2025, 11:15 p.m. | 4 hours, 4 minutes ago
Description : A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unit_status_info.php. Executing manipulation of the argument usid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 23:15:00 GMT

CVE-2025-9594 - iSourcecode Apartment Management System SQL Injection

CVE ID : CVE-2025-9594
Published : Aug. 28, 2025, 11:15 p.m. | 4 hours, 4 minutes ago
Description : A vulnerability has been found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /report/complain_info.php. The manipulation of the argument vid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 23:15:00 GMT

CVE-2025-9591 - ZrLog Cross-Site Scripting Vulnerability in Theme Configuration Form

CVE ID : CVE-2025-9591
Published : Aug. 28, 2025, 10:15 p.m. | 5 hours, 4 minutes ago
Description : A security vulnerability has been detected in ZrLog up to 3.1.5. This vulnerability affects unknown code of the file /api/admin/template/config of the component Theme Configuration Form. Such manipulation of the argument footerLink leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 22:15:00 GMT

CVE-2025-9592 - iSourcecode Apartment Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9592
Published : Aug. 28, 2025, 10:15 p.m. | 5 hours, 4 minutes ago
Description : A vulnerability was detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/bill_info.php. Performing manipulation of the argument vid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 22:15:00 GMT

CVE-2025-58058 - xz LZMA Header Buffer Overflow Vulnerability

CVE ID : CVE-2025-58058
Published : Aug. 28, 2025, 10:15 p.m. | 2 hours, 22 minutes ago
Description : xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn't include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 22:15:00 GMT

CVE-2025-58061 - OpenEBS Local PV RawFile World Readable Persistent Volume Data

CVE ID : CVE-2025-58061
Published : Aug. 28, 2025, 10:15 p.m. | 2 hours, 22 minutes ago
Description : OpenEBS Local PV RawFile allows dynamic deployment of Stateful Persistent Node-Local Volumes & Filesystems for Kubernetes. Prior to version 0.10.0, persistent volume data is world readable and that would allow non-privileged users to access sensitive data such as databases of k8s workload. The rawfile-localpv storage class creates persistent volume data under /var/csi/rawfile/ on Kubernetes hosts by default. However, the directory and data in it are world-readable. It allows non-privileged users to access the whole persistent volume data, and those can include sensitive information such as a whole database if the Kubernetes tenants are running MySQL or PostgreSQL in a container so it could lead to a database breach. This issue has been patched in version 0.10.0.
Severity: 5.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 22:15:00 GMT

CVE-2025-9589 - Cudy WR1200EA Default Password Disclosure

CVE ID : CVE-2025-9589
Published : Aug. 28, 2025, 10:15 p.m. | 2 hours, 22 minutes ago
Description : A vulnerability was determined in Cudy WR1200EA 2.3.7-20250113-121810. Affected is an unknown function of the file /etc/shadow. Executing manipulation can lead to use of default password. The attack needs to be launched locally. A high complexity level is associated with this attack. The exploitability is told to be difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 2.5 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 22:15:00 GMT

CVE-2025-9590 - Weaver E-Mobile Mobile Management Platform Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-9590
Published : Aug. 28, 2025, 10:15 p.m. | 2 hours, 21 minutes ago
Description : A vulnerability was identified in Weaver E-Mobile Mobile Management Platform up to 20250813. Affected by this vulnerability is an unknown functionality. The manipulation of the argument gohome leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 22:15:00 GMT

CVE-2025-9585 - Comfast CF-N1 Command Injection Vulnerability

CVE ID : CVE-2025-9585
Published : Aug. 28, 2025, 9:15 p.m. | 3 hours, 21 minutes ago
Description : A vulnerability was determined in Comfast CF-N1 2.6.0. This affects the function wifilith_delete_pic_file of the file /usr/bin/webmgnt. This manipulation of the argument portal_delete_picname causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 21:15:00 GMT

CVE-2025-9586 - Comfast CF-N1 Command Injection Vulnerability

CVE ID : CVE-2025-9586
Published : Aug. 28, 2025, 9:15 p.m. | 3 hours, 21 minutes ago
Description : A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wireless_device_dissoc of the file /usr/bin/webmgnt. Such manipulation of the argument mac leads to command injection. The attack may be performed from a remote location. The exploit is publicly available and might be used.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 21:15:00 GMT

CVE-2025-6203 - HashiCorp Vault CPU and Memory Exhaustion Vulnerability

CVE ID : CVE-2025-6203
Published : Aug. 28, 2025, 8:15 p.m. | 4 hours, 21 minutes ago
Description : A malicious user may submit a specially-crafted complex payload that otherwise meets the default request size limit which results in excessive memory and CPU consumption of Vault. This may lead to a timeout in Vault’s auditing subroutine, potentially resulting in the Vault server to become unresponsive. This vulnerability, CVE-2025-6203, is fixed in Vault Community Edition 1.20.3 and Vault Enterprise 1.20.3, 1.19.9, 1.18.14, and 1.16.25.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 20:15:00 GMT

CVE-2025-9582 - Comfast CF-N1 Command Injection Vulnerability

CVE ID : CVE-2025-9582
Published : Aug. 28, 2025, 8:15 p.m. | 4 hours, 21 minutes ago
Description : A flaw has been found in Comfast CF-N1 2.6.0. Affected is the function ntp_timezone of the file /usr/bin/webmgnt. Executing manipulation of the argument timestr can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 20:15:00 GMT

CVE-2025-9583 - Comfast CF-N1 Command Injection Vulnerability

CVE ID : CVE-2025-9583
Published : Aug. 28, 2025, 8:15 p.m. | 4 hours, 21 minutes ago
Description : A vulnerability has been found in Comfast CF-N1 2.6.0. Affected by this vulnerability is the function ping_config of the file /usr/bin/webmgnt. The manipulation leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 20:15:00 GMT

CVE-2025-9584 - Comfast CF-N1 Command Injection Vulnerability

CVE ID : CVE-2025-9584
Published : Aug. 28, 2025, 8:15 p.m. | 4 hours, 21 minutes ago
Description : A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function update_interface_png of the file /usr/bin/webmgnt. The manipulation of the argument interface/display_name results in command injection. The attack can be executed remotely. The exploit has been made public and could be used.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 20:15:00 GMT

CVE-2025-57220 - Tenda AC10 Privilege Escalation Remote Code Execution

CVE ID : CVE-2025-57220
Published : Aug. 28, 2025, 7:15 p.m. | 5 hours, 21 minutes ago
Description : An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privileges to root via a crafted UDP packet.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 19:15:00 GMT

CVE-2025-9577 - TOTOLINK X2000R Default Credentials Vulnerability

CVE ID : CVE-2025-9577
Published : Aug. 28, 2025, 7:15 p.m. | 5 hours, 21 minutes ago
Description : A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credentials. Attacking locally is a requirement. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been released to the public and may be exploited.
Severity: 2.5 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 19:15:00 GMT

CVE-2025-9579 - "LB-LINK BL-X26 HTTP Handler Os Command Injection Vulnerability"

CVE ID : CVE-2025-9579
Published : Aug. 28, 2025, 7:15 p.m. | 5 hours, 21 minutes ago
Description : A weakness has been identified in LB-LINK BL-X26 1.2.8. The impacted element is an unknown function of the file /goform/set_hidessid_cfg of the component HTTP Handler. This manipulation of the argument enable causes os command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 19:15:00 GMT

CVE-2025-9580 - LB-LINK BL-X26 HTTP Handler Os Command Injection Vulnerability

CVE ID : CVE-2025-9580
Published : Aug. 28, 2025, 7:15 p.m. | 5 hours, 21 minutes ago
Description : A security vulnerability has been detected in LB-LINK BL-X26 1.2.8. This affects an unknown function of the file /goform/set_blacklist of the component HTTP Handler. Such manipulation of the argument mac leads to os command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 19:15:00 GMT

CVE-2025-9581 - Comfast CF-N1 Command Injection Vulnerability

CVE ID : CVE-2025-9581
Published : Aug. 28, 2025, 7:15 p.m. | 5 hours, 21 minutes ago
Description : A vulnerability was detected in Comfast CF-N1 2.6.0. This impacts the function multi_pppoe of the file /usr/bin/webmgnt. Performing manipulation of the argument phy_interface results in command injection. The attack may be initiated remotely. The exploit is now public and may be used.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 19:15:00 GMT

CVE-2025-57215 - Tenda AC10 Stack Overflow Vulnerability

CVE ID : CVE-2025-57215
Published : Aug. 28, 2025, 7:15 p.m. | 3 hours, 21 minutes ago
Description : Tenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function get_parentControl_list_Info.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 19:15:00 GMT

CVE-2025-57219 - Tenda AC10 Unauthenticated Privilege Escalation Vulnerability

CVE ID : CVE-2025-57219
Published : Aug. 28, 2025, 7:15 p.m. | 3 hours, 21 minutes ago
Description : Incorrect access control in the endpoint /goform/ate of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 allows attackers to escalate privileges or access sensitive components via a crafted request.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 19:15:00 GMT

CVE-2025-58048 - Paymenter File Upload Arbitrary Code Execution

CVE ID : CVE-2025-58048
Published : Aug. 28, 2025, 6:15 p.m. | 4 hours, 21 minutes ago
Description : Paymenter is a free and open-source webshop solution for hostings. Prior to version 1.2.11, the ticket attachments functionality in Paymenter allows a malicious authenticated user to upload arbitrary files. This could result in sensitive data extraction from the database, credentials being read from configuration files, and arbitrary system commands being run under the web server user context. This vulnerability was patched by commit 87c3db4 and was released under the version 1.2.11 tag without any other code modifications compared to version 1.2.10. If upgrading is not immediately possible, administrators can mitigate this vulnerability with one or more of the following measures: updating nginx config to download attachments instead of executing them or disallowing access to /storage/ fully using a WAF such as Cloudflare.
Severity: 9.9 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 18:15:00 GMT

CVE-2025-58049 - XWiki Platform Unencrypted Cookies Storage Vulnerability

CVE ID : CVE-2025-58049
Published : Aug. 28, 2025, 6:15 p.m. | 4 hours, 21 minutes ago
Description : XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions from 14.4.2 to before 16.4.8, 16.5.0-rc-1 to before 16.10.7, and 17.0.0-rc-1 to before 17.4.0-rc-1, the PDF export jobs store sensitive cookies unencrypted in job statuses. XWiki shouldn't store passwords in plain text, and it shouldn't be possible to gain access to plain text passwords by gaining access to, e.g., a backup of the data directory. This vulnerability has been patched in XWiki 16.4.8, 16.10.7, and 17.4.0-rc-1.
Severity: 5.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 18:15:00 GMT

CVE-2025-58059 - Valtimo Business Process Automation Remote Code Execution and Data Access Vulnerability

CVE ID : CVE-2025-58059
Published : Aug. 28, 2025, 6:15 p.m. | 4 hours, 21 minutes ago
Description : Valtimo is a platform for Business Process Automation. In versions before 12.16.0.RELEASE, and from 13.0.0.RELEASE to before 13.1.2.RELEASE, any admin that can create or modify and execute process-definitions could gain access to sensitive data or resources. This includes but is not limited to: running executables on the application host, inspecting and extracting data from the host environment or application properties, spring beans (application context, database pooling). The following conditions have to be met in order to perform this attack: the user must be logged in, have the admin role, and must have some knowledge about running scripts via a the Camunda/Operator engine. Version 12.16.0 and 13.1.2 have been patched. It is strongly advised to upgrade. If no scripting is needed in any of the processes, it could be possible to disable it altogether via the ProcessEngineConfiguration. However, this workaround could lead to unexpected side-effects.
Severity: 9.1 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 18:15:00 GMT

CVE-2025-9195 - Solidigm DC Products Firmware Denial of Service

CVE ID : CVE-2025-9195
Published : Aug. 28, 2025, 6:15 p.m. | 4 hours, 21 minutes ago
Description : Improper input validation in firmware of some Solidigm DC Products may allow an attacker with local access to cause a Denial of Service
Severity: 4.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 18:15:00 GMT

CVE-2025-9575 - Linksys Router CGI Upload Command Injection Vulnerability

CVE ID : CVE-2025-9575
Published : Aug. 28, 2025, 6:15 p.m. | 4 hours, 21 minutes ago
Description : A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function cgiMain of the file /cgi-bin/upload.cgi. Executing manipulation of the argument filename can lead to os command injection. The attack may be performed from a remote location. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 18:15:00 GMT

CVE-2025-9576 - Seeedstudio ReSpeaker LinkIt7688 Unauthenticated Default Credentials Disclosure

CVE ID : CVE-2025-9576
Published : Aug. 28, 2025, 6:15 p.m. | 4 hours, 21 minutes ago
Description : A vulnerability was identified in seeedstudio ReSpeaker LinkIt7688. Impacted is an unknown function of the file /etc/shadow of the component Administrative Interface. The manipulation leads to use of default credentials. An attack has to be approached locally. A high degree of complexity is needed for the attack. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 2.5 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 18:15:00 GMT

CVE-2025-31971 - AIML Solutions for HCL SX SSRF

CVE ID : CVE-2025-31971
Published : Aug. 28, 2025, 6:15 p.m. | 2 hours, 21 minutes ago
Description : AIML Solutions for HCL SX is vulnerable to a URL validation vulnerability.  The issue may allow attackers to launch a server-side request forgery (SSRF) attack enabling unauthorized network calls from the system, potentially exposing internal services or sensitive information.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 18:15:00 GMT

CVE-2025-57217 - Tenda AC10 Stack Overflow Vulnerability

CVE ID : CVE-2025-57217
Published : Aug. 28, 2025, 6:15 p.m. | 2 hours, 21 minutes ago
Description : Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 18:15:00 GMT

CVE-2025-57218 - Tenda AC10 Stack Overflow Vulnerability

CVE ID : CVE-2025-57218
Published : Aug. 28, 2025, 6:15 p.m. | 2 hours, 21 minutes ago
Description : Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the security_5g parameter in the function sub_46284C.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 18:15:00 GMT

CVE-2025-58047 - Plone Volto NodeJS Server Crash

CVE ID : CVE-2025-58047
Published : Aug. 28, 2025, 6:15 p.m. | 2 hours, 21 minutes ago
Description : Volto is a React based frontend for the Plone Content Management System. In versions from 19.0.0-alpha.1 to before 19.0.0-alpha.4, 18.0.0 to before 18.24.0, 17.0.0 to before 17.22.1, and prior to 16.34.0, an anonymous user could cause the NodeJS server part of Volto to quit with an error when visiting a specific URL. The problem has been patched in versions 16.34.0, 17.22.1, 18.24.0, and 19.0.0-alpha.4. To mitigate downtime, have setup automatically restart processes that quit with an error.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 18:15:00 GMT

CVE-2025-57759 - Contao Unauthenticated Permission Bypass Vulnerability

CVE ID : CVE-2025-57759
Published : Aug. 28, 2025, 5:15 p.m. | 3 hours, 21 minutes ago
Description : Contao is an Open Source CMS. In versions starting from 5.3.0 and prior to 5.3.38 and 5.6.1, under certain conditions, back end users may be able to edit fields of pages and articles without having the necessary permissions. This issue has been patched in versions 5.3.38 and 5.6.1. There are no workarounds.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 17:15:00 GMT

CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution Vulnerability

CVE ID : CVE-2025-57819
Published : Aug. 28, 2025, 5:15 p.m. | 3 hours, 21 minutes ago
Description : FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 17:15:00 GMT

CVE-2025-58334 - JetBrains IDE Services Privilege Escalation Vulnerability

CVE ID : CVE-2025-58334
Published : Aug. 28, 2025, 5:15 p.m. | 3 hours, 21 minutes ago
Description : In JetBrains IDE Services before 2025.5.0.1086, 2025.4.2.2164 users without appropriate permissions could assign high-privileged role for themselves
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 17:15:00 GMT

CVE-2025-58335 - JetBrains Junie Remote Information Disclosure Vulnerability

CVE ID : CVE-2025-58335
Published : Aug. 28, 2025, 5:15 p.m. | 3 hours, 21 minutes ago
Description : In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243.284.54, 243.284.50 information disclosure was possible via search_project function
Severity: 5.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 17:15:00 GMT

CVE-2025-31979 - HCL BigFix SM File Upload Validation Bypass

CVE ID : CVE-2025-31979
Published : Aug. 28, 2025, 5:15 p.m. | 2 hours, 23 minutes ago
Description : A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix SM, where the application fails to properly enforce file type restrictions during the upload process. An attacker may exploit this flaw to upload malicious or unauthorized files, such as scripts, executables, or web shells, by bypassing client-side or server-side validation mechanisms.
Severity: 5.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 17:15:00 GMT

CVE-2025-57756 - Contao Information Disclosure Vulnerability

CVE ID : CVE-2025-57756
Published : Aug. 28, 2025, 5:15 p.m. | 2 hours, 23 minutes ago
Description : Contao is an Open Source CMS. In versions starting from 4.9.14 and prior to 4.13.56, 5.3.38, and 5.6.1, protected content elements that are rendered as fragments are indexed and become publicly available in the front end search. This issue has been patched in versions 4.13.56, 5.3.38, and 5.6.1. A workaround involves disabling the front end search.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 17:15:00 GMT

CVE-2025-57757 - Contao RSS Feed Information Disclosure Vulnerability

CVE ID : CVE-2025-57757
Published : Aug. 28, 2025, 5:15 p.m. | 2 hours, 23 minutes ago
Description : Contao is an Open Source CMS. In versions starting from 5.0.0 and prior to 5.3.38 and 5.6.1, if a news feed contains protected news archives, their news items are not filtered and become publicly available in the RSS feed. This issue has been patched in versions 5.3.38 and 5.6.1. A workaround involves not adding protected news archives to the news feed page.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 17:15:00 GMT

CVE-2025-57758 - Contao Table Access Voter Privilege Escalation Vulnerability

CVE ID : CVE-2025-57758
Published : Aug. 28, 2025, 5:15 p.m. | 2 hours, 23 minutes ago
Description : Contao is an Open Source CMS. In versions starting from 5.0.0 and prior to 5.3.38 and 5.6.1, the table access voter in the back end doesn't check if a user is allowed to access the corresponding module. This issue has been patched in versions 5.3.38 and 5.6.1. A workaround involves not relying solely on the voter and additionally to check USER_CAN_ACCESS_MODULE.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 17:15:00 GMT

CVE-2025-31977 - HCL BigFix SM Cryptographic Weakness

CVE ID : CVE-2025-31977
Published : Aug. 28, 2025, 5:15 p.m. | 2 hours, 14 minutes ago
Description : HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms.  An attacker with network access could exploit this weakness to decrypt or manipulate encrypted communications under certain conditions.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 17:15:00 GMT

CVE-2025-31972 - HCL BigFix SM Sensitive Information Exposure

CVE ID : CVE-2025-31972
Published : Aug. 28, 2025, 5:15 p.m. | 1 hour, 6 minutes ago
Description : HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 17:15:00 GMT

CVE-2024-13986 - Nagios XI Remote Code Execution Vulnerability

CVE ID : CVE-2024-13986
Published : Aug. 28, 2025, 4:15 p.m. | 2 hours, 6 minutes ago
Description : Nagios XI < 2024R1.3.2 contains a remote code execution vulnerability by chaining two flaws: an arbitrary file upload and a path traversal in the Core Config Snapshots interface. The issue arises from insufficient validation of file paths and extensions during MIB upload and snapshot rename operations. Exploitation results in the placement of attacker-controlled PHP files in a web-accessible directory, executed as the www-data user.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 16:15:00 GMT

CVE-2025-25010 - Kibana Privilege Escalation Vulnerability

CVE ID : CVE-2025-25010
Published : Aug. 28, 2025, 4:15 p.m. | 2 hours, 6 minutes ago
Description : Incorrect authorization in Kibana can lead to privilege escalation via the built-in reporting_user role which incorrectly has the ability to access all Kibana Spaces.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 16:15:00 GMT

CVE-2025-29364 - Spim Simulator Spim Buffer Overflow Vulnerability

CVE ID : CVE-2025-29364
Published : Aug. 28, 2025, 4:15 p.m. | 2 hours, 6 minutes ago
Description : spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in the READ_SYSCALL and WRITE_SYSCALL system calls. The application verifies the legitimacy of the starting and ending addresses for memory read/write operations. By configuring the starting and ending addresses for memory read/write to point to distinct memory segments within the virtual machine, it is possible to circumvent these checks.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 16:15:00 GMT

CVE-2025-51643 - Meitrack T366G-L GPS Tracker Unauthenticated SPI Flash Chip Extraction

CVE ID : CVE-2025-51643
Published : Aug. 28, 2025, 4:15 p.m. | 2 hours, 6 minutes ago
Description : Meitrack T366G-L GPS Tracker devices contain an SPI flash chip (Winbond 25Q64JVSIQ) that is accessible without authentication or tamper protection. An attacker with physical access to the device can use a standard SPI programmer to extract the firmware using flashrom. This results in exposure of sensitive configuration data such as APN credentials, backend server information, and network parameter
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 16:15:00 GMT

CVE-2025-57767 - Asterisk SIP Authorization Header Null Pointer Dereference Vulnerability

CVE ID : CVE-2025-57767
Published : Aug. 28, 2025, 4:15 p.m. | 2 hours, 6 minutes ago
Description : Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.15.2, 21.10.2, and 22.5.2, if a SIP request is received with an Authorization header that contains a realm that wasn't in a previous 401 response's WWW-Authenticate header, or an Authorization header with an incorrect realm was received without a previous 401 response being sent, the get_authorization_header() function in res_pjsip_authenticator_digest will return a NULL. This wasn't being checked before attempting to get the digest algorithm from the header which causes a SEGV. This issue has been patched in versions 20.15.2, 21.10.2, and 22.5.2. There are no workarounds.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 16:15:00 GMT

CVE-2025-52054 - Tenda AC8 MAC Address Guessable Root Password Vulnerability

CVE ID : CVE-2025-52054
Published : Aug. 28, 2025, 3:16 p.m. | 3 hours, 5 minutes ago
Description : An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate with network services on the device.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 15:16:00 GMT

CVE-2025-54995 - Asterisk Resource Exhaustion and Leak Vulnerability

CVE ID : CVE-2025-54995
Published : Aug. 28, 2025, 3:16 p.m. | 3 hours, 5 minutes ago
Description : Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions 18.26.4 and 18.9-cert17.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 15:16:00 GMT

CVE-2025-55583 - D-Link DIR-868L Command Injection Vulnerability

CVE ID : CVE-2025-55583
Published : Aug. 28, 2025, 3:16 p.m. | 3 hours, 5 minutes ago
Description : D-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS command injection vulnerability in the fileaccess.cgi component. The endpoint /dws/api/UploadFile accepts a pre_api_arg parameter that is passed directly to system-level shell execution functions without sanitization or authentication. Remote attackers can exploit this to execute arbitrary commands as root via crafted HTTP requests.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 15:16:00 GMT

CVE-2025-56236 - FormCms Stored XSS Vulnerability

CVE ID : CVE-2025-56236
Published : Aug. 28, 2025, 3:16 p.m. | 3 hours, 5 minutes ago
Description : FormCms v0.5.5 contains a stored cross-site scripting (XSS) vulnerability in the avatar upload feature. Authenticated users can upload .html files containing malicious JavaScript, which are accessible via a public URL. When a privileged user accesses the file, the script executes in their browser context.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 15:16:00 GMT

CVE-2025-8067 - Udisks D-BUS Loop Device Handler Index Validation Bypass

CVE ID : CVE-2025-8067
Published : Aug. 28, 2025, 3:16 p.m. | 3 hours, 5 minutes ago
Description : A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor list and index specifying the file where the loop device should be backed. The function itself validates the index value to ensure it isn't bigger than the maximum value allowed. However, it fails to validate the lower bound, allowing the index parameter to be a negative value. Under these circumstances, an attacker can cause the UDisks daemon to crash or perform a local privilege escalation by gaining access to files owned by privileged users.
Severity: 8.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 15:16:00 GMT

CVE-2024-48908 - Lychee Link Checking Action Arbitrary Code Injection Vulnerability

CVE ID : CVE-2024-48908
Published : Aug. 28, 2025, 3:15 p.m. | 3 hours, 6 minutes ago
Description : lychee link checking action checks links in Markdown, HTML, and text files using lychee. Prior to version 2.0.2, there is a potential attack of arbitrary code injection vulnerability in lychee-setup of the composite action at action.yml. This issue has been patched in version 2.0.2.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 15:15:00 GMT

CVE-2025-51969 - PuneethReddyHC Online Shopping System SQL Injection

CVE ID : CVE-2025-51969
Published : Aug. 28, 2025, 2:15 p.m. | 4 hours, 6 minutes ago
Description : A SQL Injection vulnerability exists in the product.php page of PuneethReddyHC Online Shopping System Advanced 1.0. This flaw is present in the product_id GET parameter, which is not properly validated before being included in a SQL statement.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 14:15:00 GMT

CVE-2025-51971 - PuneethReddyHC Online Shopping System Reflected XSS

CVE ID : CVE-2025-51971
Published : Aug. 28, 2025, 2:15 p.m. | 4 hours, 6 minutes ago
Description : A reflected Cross-Site Scripting (XSS) vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0. Unsanitized user input in the f_name parameter is reflected in the server response without proper HTML encoding or output escaping. This allows remote attackers to inject arbitrary JavaScript code.
Severity: 5.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 14:15:00 GMT

CVE-2025-51972 - PuneethReddyHC Online Shopping System SQL Injection

CVE ID : CVE-2025-51972
Published : Aug. 28, 2025, 2:15 p.m. | 4 hours, 6 minutes ago
Description : A SQL Injection vulnerability exists in the login.php of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 14:15:00 GMT

CVE-2025-9578 - Acronis Cyber Protect Cloud Agent Windows Insecure Folder Permissions Privilege Escalation

CVE ID : CVE-2025-9578
Published : Aug. 28, 2025, 2:15 p.m. | 4 hours, 5 minutes ago
Description : Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 40734.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 14:15:00 GMT

CVE-2024-49790 - IBM Watson Studio on Cloud Pak for Data Cross-Site Scripting (XSS)

CVE ID : CVE-2024-49790
Published : Aug. 28, 2025, 2:15 p.m. | 1 hour, 56 minutes ago
Description : IBM Watson Studio on Cloud Pak for Data 4.0 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Severity: 5.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 14:15:00 GMT

CVE-2025-51967 - ProjectsAndPrograms School Management System Reflected Cross-site Scripting (XSS)

CVE ID : CVE-2025-51967
Published : Aug. 28, 2025, 2:15 p.m. | 1 hour, 56 minutes ago
Description : A Reflected Cross-site Scripting (XSS) vulnerability exists in the themeSet.php file of ProjectsAndPrograms School Management System 1.0. The application fails to sanitize user-supplied input in the theme POST parameter, allowing an attacker to inject and execute arbitrary JavaScript in a victim's browser.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 14:15:00 GMT

CVE-2025-51968 - PuneethReddyHC Online Shopping System SQL Injection

CVE ID : CVE-2025-51968
Published : Aug. 28, 2025, 2:15 p.m. | 1 hour, 56 minutes ago
Description : A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The application fails to properly sanitize user-supplied input in the proId POST parameter, allowing attackers to inject arbitrary SQL expressions.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 14:15:00 GMT

CVE-2025-54724 - Golo Cross-site Scripting (XSS)

CVE ID : CVE-2025-54724
Published : Aug. 28, 2025, 1:16 p.m. | 2 hours, 56 minutes ago
Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Golo allows Reflected XSS. This issue affects Golo: from n/a through 1.7.1.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-54725 - Uxper Golo Authentication Bypass

CVE ID : CVE-2025-54725
Published : Aug. 28, 2025, 1:16 p.m. | 2 hours, 56 minutes ago
Description : Authentication Bypass Using an Alternate Path or Channel vulnerability in uxper Golo allows Authentication Abuse. This issue affects Golo: from n/a through 1.7.0.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-54731 - YouTube Showcase Object Injection Vulnerability

CVE ID : CVE-2025-54731
Published : Aug. 28, 2025, 1:16 p.m. | 2 hours, 56 minutes ago
Description : Improper Control of Generation of Code ('Code Injection') vulnerability in emarket-design YouTube Showcase allows Object Injection. This issue affects YouTube Showcase: from n/a through 3.5.1.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-54733 - Miles All Bootstrap Blocks Authentication Bypass

CVE ID : CVE-2025-54733
Published : Aug. 28, 2025, 1:16 p.m. | 2 hours, 56 minutes ago
Description : Missing Authorization vulnerability in Miles All Bootstrap Blocks allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects All Bootstrap Blocks: from n/a through 1.3.28.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-54734 - BPlugins B Slider Missing Authorization Vulnerability

CVE ID : CVE-2025-54734
Published : Aug. 28, 2025, 1:16 p.m. | 2 hours, 56 minutes ago
Description : Missing Authorization vulnerability in bPlugins B Slider allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B Slider: from n/a through 1.1.30.
Severity: 5.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-54738 - NooTheme Jobmonster Authentication Bypass

CVE ID : CVE-2025-54738
Published : Aug. 28, 2025, 1:16 p.m. | 2 hours, 56 minutes ago
Description : Authentication Bypass Using an Alternate Path or Channel vulnerability in NooTheme Jobmonster allows Authentication Abuse. This issue affects Jobmonster: from n/a through 4.7.9.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-54742 - Magepeopleteam WpEvently Untrusted Data Deserialization Object Injection Vulnerability

CVE ID : CVE-2025-54742
Published : Aug. 28, 2025, 1:16 p.m. | 2 hours, 56 minutes ago
Description : Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently allows Object Injection. This issue affects WpEvently: from n/a through 4.4.8.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-58123 - Checkmk Exchange Plugin SSL/TLS Certificate Validation Vulnerability

CVE ID : CVE-2025-58123
Published : Aug. 28, 2025, 1:16 p.m. | 2 hours, 56 minutes ago
Description : Improper Certificate Validation in Checkmk Exchange plugin BGP Monitoring allows attackers in MitM position to intercept traffic.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-58124 - Checkmk Exchange Certificate Validation Bypass

CVE ID : CVE-2025-58124
Published : Aug. 28, 2025, 1:16 p.m. | 2 hours, 56 minutes ago
Description : Improper Certificate Validation in Checkmk Exchange plugin check-mk-api allows attackers in MitM position to intercept traffic.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-58125 - Freebox Checkmk Exchange Plugin SSL Certificate Validation Bypass

CVE ID : CVE-2025-58125
Published : Aug. 28, 2025, 1:16 p.m. | 2 hours, 56 minutes ago
Description : Improper Certificate Validation in Checkmk Exchange plugin Freebox v6 agent allows attackers in MitM position to intercept traffic.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-58126 - VMware vSAN Checkmk Exchange Plugin SSL/TLS Man-in-the-Middle Attack Vulnerability

CVE ID : CVE-2025-58126
Published : Aug. 28, 2025, 1:16 p.m. | 2 hours, 56 minutes ago
Description : Improper Certificate Validation in Checkmk Exchange plugin VMware vSAN allows attackers in MitM position to intercept traffic.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-58127 - Dell Powerscale Certificate Validation Weakness

CVE ID : CVE-2025-58127
Published : Aug. 28, 2025, 1:16 p.m. | 2 hours, 56 minutes ago
Description : Improper Certificate Validation in Checkmk Exchange plugin Dell Powerscale allows attackers in MitM position to intercept traffic.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-53588 - UKR Solution UPC/EAN/GTIN Code Generator Path Traversal

CVE ID : CVE-2025-53588
Published : Aug. 28, 2025, 1:16 p.m. | 1 hour, 32 minutes ago
Description : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Dmitry V. (CEO of "UKR Solution") UPC/EAN/GTIN Code Generator allows Path Traversal. This issue affects UPC/EAN/GTIN Code Generator: from n/a through 2.0.2.
Severity: 7.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-54029 - WooCommerce CSV Import Export Path Traversal

CVE ID : CVE-2025-54029
Published : Aug. 28, 2025, 1:16 p.m. | 1 hour, 32 minutes ago
Description : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in extendons WooCommerce csv import export allows Path Traversal. This issue affects WooCommerce csv import export: from n/a through 2.0.6.
Severity: 7.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-54710 - Tiktok Feed Missing Authorization Vulnerability

CVE ID : CVE-2025-54710
Published : Aug. 28, 2025, 1:16 p.m. | 1 hour, 32 minutes ago
Description : Missing Authorization vulnerability in bPlugins Tiktok Feed allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Tiktok Feed: from n/a through 1.0.21.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-54714 - Zephyr Project Manager Missing Authorization Vulnerability

CVE ID : CVE-2025-54714
Published : Aug. 28, 2025, 1:16 p.m. | 1 hour, 32 minutes ago
Description : Missing Authorization vulnerability in Dylan James Zephyr Project Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Zephyr Project Manager: from n/a through 3.3.201.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-54716 - Ovatheme Ireca PHP Remote File Inclusion Vulnerability

CVE ID : CVE-2025-54716
Published : Aug. 28, 2025, 1:16 p.m. | 1 hour, 32 minutes ago
Description : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Ireca allows PHP Local File Inclusion. This issue affects Ireca: from n/a through 1.8.5.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-54720 - SteelThemes Nest Addons SQL Injection

CVE ID : CVE-2025-54720
Published : Aug. 28, 2025, 1:16 p.m. | 1 hour, 32 minutes ago
Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SteelThemes Nest Addons allows SQL Injection. This issue affects Nest Addons: from n/a through 1.6.3.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-53337 - Ashan Perera LifePress Missing Authorization Vulnerability

CVE ID : CVE-2025-53337
Published : Aug. 28, 2025, 1:16 p.m. | 1 hour, 11 minutes ago
Description : Missing Authorization vulnerability in Ashan Perera LifePress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects LifePress: from n/a through 2.1.3.
Severity: 5.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-53572 - eMarket-Design WP Easy Contact Object Injection Vulnerability

CVE ID : CVE-2025-53572
Published : Aug. 28, 2025, 1:16 p.m. | 1 hour, 11 minutes ago
Description : Deserialization of Untrusted Data vulnerability in emarket-design WP Easy Contact allows Object Injection. This issue affects WP Easy Contact: from n/a through 4.0.1.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-53576 - Ovatheme Events PHP Local File Inclusion Vulnerability

CVE ID : CVE-2025-53576
Published : Aug. 28, 2025, 1:16 p.m. | 1 hour, 11 minutes ago
Description : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Ovatheme Events allows PHP Local File Inclusion. This issue affects Ovatheme Events: from n/a through 1.2.8.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-53578 - Gavias Kipso PHP Remote File Inclusion Vulnerability

CVE ID : CVE-2025-53578
Published : Aug. 28, 2025, 1:16 p.m. | 1 hour, 11 minutes ago
Description : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Kipso allows PHP Local File Inclusion. This issue affects Kipso: from n/a through 1.3.4.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-53579 - Captcha.eu Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-53579
Published : Aug. 28, 2025, 1:16 p.m. | 1 hour, 11 minutes ago
Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in captcha.eu Captcha.eu allows Reflected XSS. This issue affects Captcha.eu: from n/a through n/a.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-53583 - Emarket-Design Employee Spotlight Deserialization of Untrusted Data Object Injection

CVE ID : CVE-2025-53583
Published : Aug. 28, 2025, 1:16 p.m. | 1 hour, 11 minutes ago
Description : Deserialization of Untrusted Data vulnerability in emarket-design Employee Spotlight allows Object Injection. This issue affects Employee Spotlight: from n/a through 5.1.1.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-53584 - WP Ticket Customer Service Software Support Ticket System Object Injection Vulnerability

CVE ID : CVE-2025-53584
Published : Aug. 28, 2025, 1:16 p.m. | 1 hour, 11 minutes ago
Description : Deserialization of Untrusted Data vulnerability in emarket-design WP Ticket Customer Service Software & Support Ticket System allows Object Injection. This issue affects WP Ticket Customer Service Software & Support Ticket System: from n/a through 6.0.2.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 13:16:00 GMT

CVE-2025-54762 - D-Link Media Server Remote File Upload and Command Execution Vulnerability

CVE ID : CVE-2025-54762
Published : Aug. 28, 2025, 11:16 a.m. | 1 hour, 19 minutes ago
Description : SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 11:16:00 GMT

CVE-2025-48963 - Acronis Cyber Protect Cloud Agent Privilege Escalation Vulnerability

CVE ID : CVE-2025-48963
Published : Aug. 28, 2025, 11:16 a.m. | 1 hour, 19 minutes ago
Description : Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40296.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 11:16:00 GMT

CVE-2025-58072 - "Sony SS Path Traversal Vulnerability"

CVE ID : CVE-2025-58072
Published : Aug. 28, 2025, 11:16 a.m. | 1 hour, 19 minutes ago
Description : Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, arbitrary files may be viewed by a remote unauthenticated attacker.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 11:16:00 GMT

CVE-2025-52460 - SS1 Remote File Access Vulnerability

CVE ID : CVE-2025-52460
Published : Aug. 28, 2025, 11:16 a.m. | 1 hour, 19 minutes ago
Description : Files or directories accessible to external parties issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If exploited, uploaded files and SS1 configuration files may be accessed by a remote unauthenticated attacker.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 11:16:00 GMT

CVE-2025-46409 - Samsung Smart TV Weak Encryption Authentication Bypass

CVE ID : CVE-2025-46409
Published : Aug. 28, 2025, 11:16 a.m. | 1 hour, 19 minutes ago
Description : Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, a function that requires authentication may be accessed by a remote unauthenticated attacker.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 11:16:00 GMT

CVE-2025-53970 - Apache SS Remote File Upload and Command Execution Vulnerability

CVE ID : CVE-2025-53970
Published : Aug. 28, 2025, 11:16 a.m. | 1 hour, 19 minutes ago
Description : SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 11:16:00 GMT

CVE-2025-54819 - Samsung SSD Path Traversal Vulnerability

CVE ID : CVE-2025-54819
Published : Aug. 28, 2025, 11:16 a.m. | 1 hour, 19 minutes ago
Description : Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, legitimate files may be overwritten by a remote authenticated attacker.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 11:16:00 GMT

CVE-2025-53396 - SS1 Privilege Escalation Vulnerability

CVE ID : CVE-2025-53396
Published : Aug. 28, 2025, 11:16 a.m. | 1 hour, 19 minutes ago
Description : Incorrect permission assignment for critical resource issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier), which may allow users who can log in to a client terminal to obtain root privileges.
Severity: 7.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 11:16:00 GMT

CVE-2025-58081 - SS1 Root File Access Vulnerability

CVE ID : CVE-2025-58081
Published : Aug. 28, 2025, 11:16 a.m. | 1 hour, 19 minutes ago
Description : Use of hard-coded password issue/vulnerability in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to view arbitrary files with root privileges.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 11:16:00 GMT

CVE-2024-58240 - Linux Kernel TLS Use-After-Free (UAF)

CVE ID : CVE-2024-58240
Published : Aug. 28, 2025, 11:16 a.m. | 1 hour, 19 minutes ago
Description : In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We should preferably also use a separate crypto_wait. I'm not seeing a UAF as I did in the past, I think aec7961916f3 ("tls: fix race between async notify and socket close") took care of it. This will make the next fix easier.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 11:16:00 GMT

CVE-2025-58322 - NAVER MYBOX Explorer Local Privilege Escalation Vulnerability

CVE ID : CVE-2025-58322
Published : Aug. 28, 2025, 8:15 a.m. | 4 hours, 5 minutes ago
Description : NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by executing arbitrary commands due to improper privilege checks.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 08:15:00 GMT

CVE-2025-6255 - WooCommerce Dynamic AJAX Product Filters Stored Cross-Site Scripting

CVE ID : CVE-2025-6255
Published : Aug. 28, 2025, 7:15 a.m. | 5 hours, 5 minutes ago
Description : The Dynamic AJAX Product Filters for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ parameter in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Severity: 6.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 07:15:00 GMT

CVE-2025-8073 - WooCommerce Dynamic AJAX Product Filters Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-8073
Published : Aug. 28, 2025, 7:15 a.m. | 5 hours, 5 minutes ago
Description : The Dynamic AJAX Product Filters for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Severity: 6.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 07:15:00 GMT

CVE-2024-13807 - Xagio SEO Plugin for WordPress Sensitive Information Exposure

CVE ID : CVE-2024-13807
Published : Aug. 28, 2025, 6:15 a.m. | 6 hours, 6 minutes ago
Description : The Xagio SEO plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.1.0.5 via the backup functionality due to weak filename structure and lack of protection in the directory. This makes it possible for unauthenticated attackers to extract sensitive data from backups which can include the entire database and site's files.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 06:15:00 GMT

CVE-2025-7955 - RingCentral Communications WordPress Authentication Bypass

CVE ID : CVE-2025-7955
Published : Aug. 28, 2025, 6:15 a.m. | 6 hours, 5 minutes ago
Description : The RingCentral Communications plugin for WordPress is vulnerable to Authentication Bypass due to improper validation within the ringcentral_admin_login_2fa_verify() function in versions 1.5 to 1.6.8. This makes it possible for unauthenticated attackers to log in as any user simply by supplying identical bogus codes.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 06:15:00 GMT

CVE-2025-7956 - Apache Ajax Search Lite Information Exposure Vulnerability

CVE ID : CVE-2025-7956
Published : Aug. 28, 2025, 6:15 a.m. | 6 hours, 5 minutes ago
Description : The Ajax Search Lite plugin for WordPress is vulnerable to Basic Information Exposure due to missing authorization in its AJAX search handler in all versions up to, and including, 4.13.1. This makes it possible for unauthenticated attackers to issue repeated AJAX requests to leak the content of any protected post in rolling 100‑character windows.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 06:15:00 GMT

CVE-2025-8977 - "WordPress Simple Download Monitor SQL Injection"

CVE ID : CVE-2025-8977
Published : Aug. 28, 2025, 5:15 a.m. | 7 hours, 5 minutes ago
Description : The Simple Download Monitor plugin for WordPress is vulnerable to time-based SQL Injection via the order parameter in all versions up to, and including, 3.9.33 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, and permissions granted by an Administrator, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 05:15:00 GMT

CVE-2025-8603 - Unlimited Elements For Elementor WordPress Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-8603
Published : Aug. 28, 2025, 4:16 a.m. | 8 hours, 5 minutes ago
Description : The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.5.148 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Severity: 6.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 04:16:00 GMT

CVE-2025-9345 - Managefy Plugin Path Traversal Vulnerability

CVE ID : CVE-2025-9345
Published : Aug. 28, 2025, 4:16 a.m. | 8 hours, 5 minutes ago
Description : The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.8 via the ajax_downloadfile() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions on files outside of the originally intended directory.
Severity: 4.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 04:16:00 GMT

CVE-2025-9346 - Booking Calendar for WordPress Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-9346
Published : Aug. 28, 2025, 4:16 a.m. | 8 hours, 5 minutes ago
Description : The Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings in all versions up to, and including, 10.14.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Severity: 6.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 04:16:00 GMT

CVE-2024-9648 - WordPress WP ULike Pro File Upload Vulnerability

CVE ID : CVE-2024-9648
Published : Aug. 28, 2025, 4:15 a.m. | 8 hours, 5 minutes ago
Description : The WP ULike Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the WP_Ulike_Pro_File_Uploader class in all versions up to, and including, 1.9.3. This makes it possible for unauthenticated attackers to upload limited arbitrary files like .php2, .php6, .php7, .phps, .pht, .phtm, .pgif, .shtml, .phar, .inc, .hphp, .ctp, .module, .html, .svg on the affected site's server which may make make other attacks like Cross-Site Scripting possible. Only versions up to 1.8.7 were confirmed vulnerable, however, the earliest tested version for a patch we have access to is 1.9.4, so we are considering 1.9.4 the patched version.
Severity: 6.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 04:15:00 GMT

CVE-2025-0951 - LiquidThemes WordPress Theme and Plugin Unauthorized Access Vulnerability

CVE ID : CVE-2025-0951
Published : Aug. 28, 2025, 4:15 a.m. | 8 hours, 5 minutes ago
Description : Multiple plugins and/or themes for WordPress by LiquidThemes are vulnerable to unauthorized access due to a missing capability check on the liquid_reset_wordpress_before AJAX in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to deactivate all of a site's plugins. While we escalated this to Envato after not being able to establish contact, it appears the developer added a nonce check, however that is not sufficient protection as the nonce is exposed to all users with access to the dashboard.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 04:15:00 GMT

CVE-2025-36003 - IBM Security Verify Governance Identity Manager Information Disclosure Vulnerability

CVE ID : CVE-2025-36003
Published : Aug. 28, 2025, 3:15 a.m. | 9 hours, 5 minutes ago
Description : IBM Security Verify Governance Identity Manager 10.0.2 could allow a remote attacker to obtain sensitive information when detailed technical error messages are returned. This information could be used in further attacks against the system.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 03:15:00 GMT

CVE-2025-57845 - Apache HTTP Server Remote Code Execution Vulnerability

CVE ID : CVE-2025-57845
Published : Aug. 28, 2025, 3:15 a.m. | 9 hours, 5 minutes ago
Description : Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-34158. Reason: This candidate is a reservation duplicate of CVE-2025-34158. Notes: All CVE users should reference CVE-2025-34158 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 03:15:00 GMT

CVE-2025-7812 - Video Share VOD WordPress CSRF Vulnerability

CVE ID : CVE-2025-7812
Published : Aug. 28, 2025, 3:15 a.m. | 9 hours, 5 minutes ago
Description : The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.6. This is due to missing or incorrect nonce validation on the adminExport() function. This makes it possible for unauthenticated attackers to update settings and execute remote code when the Server command execution setting is enabled via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 03:15:00 GMT

CVE-2025-8897 - Beaver Builder WordPress Page Builder Reflected Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-8897
Published : Aug. 28, 2025, 3:15 a.m. | 9 hours, 5 minutes ago
Description : The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘'fl_builder' parameter in all versions up to, and including, 2.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Severity: 6.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 03:15:00 GMT

CVE-2025-9344 - UsersWP WordPress Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-9344
Published : Aug. 28, 2025, 3:15 a.m. | 9 hours, 5 minutes ago
Description : The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'uwp_profile' and 'uwp_profile_header' shortcodes in all versions up to, and including, 1.2.42 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Severity: 6.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 03:15:00 GMT

CVE-2025-9352 - Pronamic Google Maps for WordPress Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-9352
Published : Aug. 28, 2025, 3:15 a.m. | 9 hours, 5 minutes ago
Description : The Pronamic Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the description field in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Severity: 5.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Thu, 28 Aug 2025 03:15:00 GMT

CVE-2025-34160 - AnyShare ServiceAgent API Remote Code Execution Vulnerability

CVE ID : CVE-2025-34160
Published : Aug. 27, 2025, 10:15 p.m. | 14 hours, 5 minutes ago
Description : AnyShare contains a critical unauthenticated remote code execution vulnerability in the ServiceAgent API exposed on port 10250. The endpoint /api/ServiceAgent/start_service accepts user-supplied input via POST and fails to sanitize command-like payloads. An attacker can inject shell syntax that is interpreted by the backend, enabling arbitrary command execution. The vulnerability is presumed to affect builds released prior to August 2025 and is said to be remediated in newer versions of the product, though the exact affected range remains undefined.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 22:15:00 GMT

CVE-2025-34162 - Bian Que Feijiu Intelligent Emergency and Quality Control System SQL Injection Vulnerability

CVE ID : CVE-2025-34162
Published : Aug. 27, 2025, 10:15 p.m. | 14 hours, 5 minutes ago
Description : An unauthenticated SQL injection vulnerability exists in the GetLyfsByParams endpoint of Bian Que Feijiu Intelligent Emergency and Quality Control System, accessible via the /AppService/BQMedical/WebServiceForFirstaidApp.asmx interface. The backend fails to properly sanitize user-supplied input in the strOpid parameter, allowing attackers to inject arbitrary SQL statements. This can lead to data exfiltration, authentication bypass, and potentially remote code execution, depending on backend configuration. The vulnerability is presumed to affect builds released prior to June 2025 and is said to be remediated in newer versions of the product, though the exact affected range remains undefined.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 22:15:00 GMT

CVE-2025-34163 - Dongsheng Logistics Software Remote Code Execution (RCE)

CVE ID : CVE-2025-34163
Published : Aug. 27, 2025, 10:15 p.m. | 14 hours, 5 minutes ago
Description : Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that fails to enforce proper file type validation and access control. An attacker can upload arbitrary files, including executable scripts such as .ashx, via a crafted multipart/form-data POST request. This allows remote code execution on the server, potentially leading to full system compromise. The vulnerability is presumed to affect builds released prior to July 2025 and is said to be remediated in newer versions of the product, though the exact affected range remains undefined.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 22:15:00 GMT

CVE-2025-34520 - Arcserve Unified Data Protection Authentication Bypass Vulnerability

CVE ID : CVE-2025-34520
Published : Aug. 27, 2025, 10:15 p.m. | 14 hours, 5 minutes ago
Description : An authentication bypass vulnerability in Arcserve Unified Data Protection (UDP) allows unauthenticated attackers to gain unauthorized access to protected functionality or user accounts. By manipulating specific request parameters or exploiting a logic flaw, an attacker can bypass login mechanisms without valid credentials and access administrator-level features. This vulnerability affects all UDP versions prior to 10.2. UDP 10.2 includes the necessary patches and requires no action. Versions 8.0 through 10.1 are supported and require either patch application or upgrade to 10.2. Versions 7.x and earlier are unsupported or out of maintenance and must be upgraded to 10.2 to remediate the issue.
Severity: 7.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 22:15:00 GMT

CVE-2025-34521 - Arcserve Unified Data Protection (UDP) Reflected Cross-Site Scripting (XSS) Vulnerability

CVE ID : CVE-2025-34521
Published : Aug. 27, 2025, 10:15 p.m. | 14 hours, 5 minutes ago
Description : A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the Arcserve Unified Data Protection (UDP), where unsanitized user input is improperly reflected in HTTP responses. This flaw allows remote attackers with low privileges to craft malicious links that, when visited by another user, execute arbitrary JavaScript in the victim’s browser. Successful exploitation may lead to session hijacking, credential theft, or other client-side impacts. The vulnerability requires user interaction and occurs within a shared browser context. This vulnerability affects all UDP versions prior to 10.2. UDP 10.2 includes the necessary patches and requires no action. Versions 8.0 through 10.1 are supported and require either patch application or upgrade to 10.2. Versions 7.x and earlier are unsupported or out of maintenance and must be upgraded to 10.2 to remediate the issue.
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 22:15:00 GMT

CVE-2025-34522 - Arcserve Unified Data Protection Heap-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-34522
Published : Aug. 27, 2025, 10:15 p.m. | 14 hours, 5 minutes ago
Description : A heap-based buffer overflow vulnerability exists in the input parsing logic of Arcserve Unified Data Protection (UDP). This flaw can be triggered without authentication by sending specially crafted input to the target system. Improper bounds checking allows an attacker to overwrite heap memory, potentially leading to application crashes or remote code execution. Exploitation occurs in the context of the affected process and does not require user interaction. The vulnerability poses a high risk due to its pre-authentication nature and potential for full compromise. This vulnerability affects all UDP versions prior to 10.2. UDP 10.2 includes the necessary patches and requires no action. Versions 8.0 through 10.1 are supported and require either patch application or upgrade to 10.2. Versions 7.x and earlier are unsupported or out of maintenance and must be upgraded to 10.2 to remediate the issue.
Severity: 9.2 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 22:15:00 GMT

CVE-2025-34523 - Arcserve Unified Data Protection (UDP) Remote Heap-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-34523
Published : Aug. 27, 2025, 10:15 p.m. | 14 hours, 5 minutes ago
Description : A heap-based buffer overflow vulnerability exists in the exists in the network-facing input handling routines of Arcserve Unified Data Protection (UDP). This flaw is reachable without authentication and results from improper bounds checking when processing attacker-controlled input. By sending specially crafted data, a remote attacker can corrupt heap memory, potentially causing a denial of service or enabling arbitrary code execution depending on the memory layout and exploitation techniques used. This vulnerability is similar in nature to CVE-2025-34522 but affects a separate code path or component. No user interaction is required, and exploitation occurs in the context of the vulnerable process. This vulnerability affects all UDP versions prior to 10.2. UDP 10.2 includes the necessary patches and requires no action. Versions 8.0 through 10.1 are supported and require either patch application or upgrade to 10.2. Versions 7.x and earlier are unsupported or out of maintenance and must be upgraded to 10.2 to remediate the issue.
Severity: 9.2 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 22:15:00 GMT

CVE-2024-13982 - SPON IP Network Broadcast System Arbitrary File Read Vulnerability

CVE ID : CVE-2024-13982
Published : Aug. 27, 2025, 10:15 p.m. | 9 hours, 12 minutes ago
Description : SPON IP Network Broadcast System, a digital audio transmission platform developed by SPON Communications, contains an arbitrary file read vulnerability in the rj_get_token.php endpoint. The flaw arises from insufficient input validation on the jsondata[url] parameter, which allows attackers to perform directory traversal and access sensitive files on the server. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted POST request to read arbitrary files, potentially exposing system configuration, credentials, or internal logic. An affected version range is undefined.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 22:15:00 GMT

CVE-2024-13984 - QiAnXin TianQing Management Center RPTSVR Path Traversal Vulnerability

CVE ID : CVE-2024-13984
Published : Aug. 27, 2025, 10:15 p.m. | 9 hours, 12 minutes ago
Description : QiAnXin TianQing Management Center versions up to and including 6.7.0.4130 contain a path traversal vulnerability in the rptsvr component that allows unauthenticated attackers to upload files to arbitrary locations on the server. The /rptsvr/upload endpoint fails to sanitize the filename parameter in multipart form-data requests, enabling path traversal. This allows attackers to place executable files in web-accessible directories, potentially leading to remote code execution.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 22:15:00 GMT

CVE-2024-13985 - Dahua EIMS Command Injection Vulnerability

CVE ID : CVE-2024-13985
Published : Aug. 27, 2025, 10:15 p.m. | 9 hours, 12 minutes ago
Description : A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capture_handle.action interface. The flaw stems from improper input validation in the captureCommand parameter, which is processed without sanitization or authentication. By sending crafted HTTP requests, attackers can inject OS-level commands that are executed on the server, leading to full system compromise.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 22:15:00 GMT

CVE-2024-13979 - St. Joe ERP System SQL Injection Vulnerability

CVE ID : CVE-2024-13979
Published : Aug. 27, 2025, 10:15 p.m. | 8 hours, 14 minutes ago
Description : A SQL injection vulnerability exists in the St. Joe ERP system ("圣乔ERP系统") that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into SQL queries, enabling direct manipulation of the backend database. Successful exploitation may result in unauthorized data access, modification of records, or limited disruption of service. An affected version range is undefined.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 22:15:00 GMT

CVE-2024-13980 - H3C Intelligent Management Center Remote Command Execution Vulnerability

CVE ID : CVE-2024-13980
Published : Aug. 27, 2025, 10:15 p.m. | 8 hours, 14 minutes ago
Description : H3C Intelligent Management Center (IMC) versions up to and including E0632H07 contains a remote command execution vulnerability in the /byod/index.xhtml endpoint. Improper handling of JSF ViewState allows unauthenticated attackers to craft POST requests with forged javax.faces.ViewState parameters, potentially leading to arbitrary command execution. This flaw does not require authentication and may be exploited without session cookies. An affected version range is undefined.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 22:15:00 GMT

CVE-2024-13981 - LiveBOS Arbitrary File Upload Vulnerability

CVE ID : CVE-2024-13981
Published : Aug. 27, 2025, 10:15 p.m. | 8 hours, 14 minutes ago
Description : LiveBOS, an object-oriented business architecture middleware suite developed by Apex Software Co., Ltd., contains an arbitrary file upload vulnerability in its UploadFile.do;.js.jsp endpoint. This flaw affects the LiveBOS Server component and allows unauthenticated remote attackers to upload crafted files outside the intended directory structure via path traversal in the filename parameter. Successful exploitation may lead to remote code execution on the server, enabling full system compromise. The vulnerability is presumed to affect builds released prior to August 2024 and is said to be remediated in newer versions of the product, though the exact affected range remains undefined.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 22:15:00 GMT

CVE-2023-7309 - Dahua Smart Park Integrated Management Platform SOAP Path Traversal Remote Code Execution Vulnerability

CVE ID : CVE-2023-7309
Published : Aug. 27, 2025, 10:15 p.m. | 7 hours, 11 minutes ago
Description : A path traversal vulnerability exists in the Dahua Smart Park Integrated Management Platform (also referred to as the Dahua Smart Campus Integrated Management Platform), affecting the SOAP-based GIS bitmap upload interface. The flaw allows unauthenticated remote attackers to upload arbitrary files to the server via crafted SOAP requests, including executable JSP payloads. Successful exploitation may lead to remote code execution (RCE) and full compromise of the affected system. The vulnerability is presumed to affect builds released prior to September 2023 and is said to be remediated in newer versions of the product, though the exact affected range remains undefined.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 22:15:00 GMT

CVE-2018-25115 - D-Link DIR-series Router Privilege Escalation Remote Command Execution Vulnerability

CVE ID : CVE-2018-25115
Published : Aug. 27, 2025, 10:15 p.m. | 6 hours, 14 minutes ago
Description : Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from improper input handling in the EVENT=CHECKFW parameter, which is passed directly to the system shell without sanitization. A crafted HTTP POST request can inject commands that are executed with root privileges, resulting in full device compromise. These router models are no longer supported at the time of assignment and affected version ranges may vary.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 22:15:00 GMT

CVE-2023-7307 - Sangfor Behavior Management System XXE Injection Vulnerability

CVE ID : CVE-2023-7307
Published : Aug. 27, 2025, 10:15 p.m. | 6 hours, 14 minutes ago
Description : Sangfor Behavior Management System (also referred to as DC Management System in Chinese-language documentation) contains an XML external entity (XXE) injection vulnerability in the /src/sangforindex endpoint. A remote unauthenticated attacker can submit crafted XML data containing external entity definitions, leading to potential disclosure of internal files, server-side request forgery (SSRF), or other impacts depending on parser behavior. The vulnerability is due to improper configuration of the XML parser, which allows resolution of external entities without restriction. This product is now integrated into their IAM (Internet Access Management) platform and an affected version range is undefined.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 22:15:00 GMT

CVE-2023-7308 - NSFOCUS SecGate3600 Authentication Bypass Information Disclosure

CVE ID : CVE-2023-7308
Published : Aug. 27, 2025, 10:15 p.m. | 6 hours, 14 minutes ago
Description : SecGate3600, a network firewall product developed by NSFOCUS, contains a sensitive information disclosure vulnerability in the /cgi-bin/authUser/authManageSet.cgi endpoint. The affected component fails to enforce authentication checks on POST requests to retrieve user data. An unauthenticated remote attacker can exploit this flaw to obtain sensitive information, including user identifiers and configuration details, by sending crafted requests to the vulnerable endpoint. An affected version range is undefined.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 22:15:00 GMT

CVE-2025-40779 - Kea DHCPv4 Assertion Failure Vulnerability

CVE ID : CVE-2025-40779
Published : Aug. 27, 2025, 9:15 p.m. | 7 hours, 14 minutes ago
Description : If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the `kea-dhcp4` process will abort with an assertion failure. This happens only if the client request is unicast directly to Kea; broadcast messages do not cause the problem. This issue affects Kea versions 2.7.1 through 2.7.9, 3.0.0, and 3.1.0.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 21:15:00 GMT

CVE-2025-5101 - GitLab Code Injection Vulnerability

CVE ID : CVE-2025-5101
Published : Aug. 27, 2025, 8:15 p.m. | 8 hours, 14 minutes ago
Description : An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that under certain conditions could have allowed an authenticated attacker to distribute malicious code that appears harmless in the web interface by taking advantage of ambiguity between branches and tags during repository imports.
Severity: 5.0 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 20:15:00 GMT

CVE-2024-37777 - O2OA Remote Code Execution Vulnerability

CVE ID : CVE-2024-37777
Published : Aug. 27, 2025, 8:15 p.m. | 6 hours, 14 minutes ago
Description : O2OA v9.0.3 was discovered to contain a remote code execution (RCE) vulnerability via the mainOutput() function.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 20:15:00 GMT

CVE-2025-2246 - GitLab Unauthenticated GraphQL API Access Vulnerability

CVE ID : CVE-2025-2246
Published : Aug. 27, 2025, 8:15 p.m. | 6 hours, 14 minutes ago
Description : An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that could have allowed unauthenticated users to access sensitive manual CI/CD variables by querying the GraphQL API.
Severity: 5.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 20:15:00 GMT

CVE-2025-3601 - GitLab Denial of Service (DoS) in URL Processing

CVE ID : CVE-2025-3601
Published : Aug. 27, 2025, 8:15 p.m. | 6 hours, 14 minutes ago
Description : An issue has been discovered in GitLab CE/EE affecting all versions from 8.15 before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that could have could have allowed an authenticated user to cause a Denial of Service (DoS) condition by submitting URLs that generate excessively large responses.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 20:15:00 GMT

CVE-2025-4225 - GitLab GraphQL Denial-of-Service Vulnerability

CVE ID : CVE-2025-4225
Published : Aug. 27, 2025, 8:15 p.m. | 6 hours, 14 minutes ago
Description : An issue has been discovered in GitLab CE/EE affecting all versions from 14.1 before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that that under certain conditions could have allowed an unauthenticated attacker to cause a denial-of-service condition affecting all users by sending specially crafted GraphQL requests.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 20:15:00 GMT

CVE-2025-55582 - D-Link DCS-825L Persistent Privilege Escalation and Arbitrary Code Execution

CVE ID : CVE-2025-55582
Published : Aug. 27, 2025, 8:15 p.m. | 6 hours, 14 minutes ago
Description : D-Link DCS-825L firmware v1.08.01 contains a vulnerability in the watchdog script `mydlink-watch-dog.sh`, which blindly respawns binaries such as `dcp` and `signalc` without verifying integrity, authenticity, or permissions. An attacker with local filesystem access (via physical access, firmware modification, or debug interfaces) can replace these binaries with malicious payloads. The script executes these binaries as root in an infinite loop, leading to persistent privilege escalation and arbitrary code execution. This issue is mitigated in v1.09.02, but the product is officially End-of-Life and unsupported.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 20:15:00 GMT

CVE-2025-55618 - Hyundai Navigation App Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-55618
Published : Aug. 27, 2025, 8:15 p.m. | 6 hours, 14 minutes ago
Description : In Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in the profile name field in navigation app which then get rendered.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 20:15:00 GMT

CVE-2025-55495 - Tenda AC6 Buffer Overflow Vulnerability

CVE ID : CVE-2025-55495
Published : Aug. 27, 2025, 7:15 p.m. | 1 hour, 27 minutes ago
Description : Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 19:15:00 GMT

CVE-2025-58050 - PCRE2 Heap-Buffer-Overflow Read Vulnerability

CVE ID : CVE-2025-58050
Published : Aug. 27, 2025, 7:15 p.m. | 1 hour, 27 minutes ago
Description : The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the (*scs:...) (Scan SubString) verb when combined with (*ACCEPT) in src/pcre2_match.c. This vulnerability may potentially lead to information disclosure if the out-of-bounds data read during the memcmp affects the final match result in a way observable by the attacker. This issue has been resolved in version 10.46.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 19:15:00 GMT

CVE-2025-58196 - UiCore Elements Cross-site Scripting Vulnerability

CVE ID : CVE-2025-58196
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 27 minutes ago
Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uicore UiCore Elements allows Stored XSS. This issue affects UiCore Elements: from n/a through 1.3.4.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58197 - Simple Download Monitor Cross-site Scripting (XSS)

CVE ID : CVE-2025-58197
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 27 minutes ago
Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mra13 / Team Tips and Tricks HQ Simple Download Monitor allows Stored XSS. This issue affects Simple Download Monitor: from n/a through 3.9.34.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58198 - Xpro Theme Builder Missing Authorization

CVE ID : CVE-2025-58198
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 27 minutes ago
Description : Missing Authorization vulnerability in Xpro Xpro Theme Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Xpro Theme Builder: from n/a through 1.2.9.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58201 - AfterShip Tracking Missing Authorization Vulnerability

CVE ID : CVE-2025-58201
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 27 minutes ago
Description : Missing Authorization vulnerability in AfterShip & Automizely AfterShip Tracking allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects AfterShip Tracking: from n/a through 1.17.17.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58202 - WordPress Simple Page Access Restriction CSRF

CVE ID : CVE-2025-58202
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 27 minutes ago
Description : Cross-Site Request Forgery (CSRF) vulnerability in Plugins and Snippets Simple Page Access Restriction allows Cross Site Request Forgery. This issue affects Simple Page Access Restriction: from n/a through 1.0.32.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58203 - Solace Extra SSRF Vulnerability

CVE ID : CVE-2025-58203
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 27 minutes ago
Description : Server-Side Request Forgery (SSRF) vulnerability in solacewp Solace Extra allows Server Side Request Forgery. This issue affects Solace Extra: from n/a through 1.3.2.
Severity: 4.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58204 - Eric Teubert Podlove Podcast Publisher Open Redirect Phishing

CVE ID : CVE-2025-58204
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 27 minutes ago
Description : URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Eric Teubert Podlove Podcast Publisher allows Phishing. This issue affects Podlove Podcast Publisher: from n/a through 4.2.5.
Severity: 4.7 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58205 - ElementInvader Elementor DOM-Based Cross-site Scripting

CVE ID : CVE-2025-58205
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 27 minutes ago
Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader ElementInvader Addons for Elementor allows DOM-Based XSS. This issue affects ElementInvader Addons for Elementor: from n/a through 1.3.6.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58208 - Elementor Forms + Drag And Drop Template Builder Cross-site Scripting

CVE ID : CVE-2025-58208
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 27 minutes ago
Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder allows Stored XSS. This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through 6.2.0.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58209 - rtCamp Transcoder Cross-Site Scripting

CVE ID : CVE-2025-58209
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 27 minutes ago
Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtCamp Transcoder allows Stored XSS. This issue affects Transcoder: from n/a through 1.4.0.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58211 - Alexvtn Chatbox Manager Stored Cross-site Scripting Vulnerability

CVE ID : CVE-2025-58211
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 27 minutes ago
Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in alexvtn Chatbox Manager allows Stored XSS. This issue affects Chatbox Manager: from n/a through 1.2.6.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58212 - Epeken All Kurir DOM-Based Cross-site Scripting

CVE ID : CVE-2025-58212
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 27 minutes ago
Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in epeken Epeken All Kurir allows DOM-Based XSS. This issue affects Epeken All Kurir: from n/a through 2.0.1.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58213 - Trafft Booking System Stored Cross-Site Scripting

CVE ID : CVE-2025-58213
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 27 minutes ago
Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ameliabooking Booking System Trafft allows Stored XSS. This issue affects Booking System Trafft: from n/a through 1.0.14.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58216 - WordPress Thumbtack Review Slider Cross-Site Scripting

CVE ID : CVE-2025-58216
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 27 minutes ago
Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jgwhite33 WP Thumbtack Review Slider allows Stored XSS. This issue affects WP Thumbtack Review Slider: from n/a through 2.6.
Severity: 5.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58217 - GeroNikolov Instant Breaking News CSRF Stored XSS

CVE ID : CVE-2025-58217
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 27 minutes ago
Description : Cross-Site Request Forgery (CSRF) vulnerability in GeroNikolov Instant Breaking News allows Stored XSS. This issue affects Instant Breaking News: from n/a through 1.0.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58218 - Enituretechnology Small Package Quotes – USPS Edition Object Injection Vulnerability

CVE ID : CVE-2025-58218
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 27 minutes ago
Description : Deserialization of Untrusted Data vulnerability in enituretechnology Small Package Quotes – USPS Edition allows Object Injection. This issue affects Small Package Quotes – USPS Edition: from n/a through 1.3.9.
Severity: 7.2 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-50979 - NodeBB SQL Injection

CVE ID : CVE-2025-50979
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 12 minutes ago
Description : NodeBB v4.3.0 is vulnerable to SQL injection in its search-categories API endpoint (/api/v3/search/categories). The search query parameter is not properly sanitized, allowing unauthenticated, remote attackers to inject boolean-based blind and PostgreSQL error-based payloads.
Severity: 8.6 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-51667 - Simple-Admin-Core SQL Injection Vulnerability

CVE ID : CVE-2025-51667
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 12 minutes ago
Description : An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection vulnerability, which may lead to partial data leakage or disruption of normal system operations.
Severity: 7.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-55422 - FoxCMS Reflected Cross Site Scripting (XSS)

CVE ID : CVE-2025-55422
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 12 minutes ago
Description : In FoxCMS 1.2.6, there is a reflected Cross Site Scripting (XSS) vulnerability in /index.php/plus.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58192 - Xylus Themes WP Bulk Delete Missing Authorization Vulnerability

CVE ID : CVE-2025-58192
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 12 minutes ago
Description : Missing Authorization vulnerability in Xylus Themes WP Bulk Delete allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Bulk Delete: from n/a through 1.3.6.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58193 - Uncanny Automator Missing Authorization Vulnerability

CVE ID : CVE-2025-58193
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 12 minutes ago
Description : Missing Authorization vulnerability in Uncanny Owl Uncanny Automator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Uncanny Automator: from n/a through 6.7.0.1.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58194 - **Boldthemes Bold Page Builder Stored Cross-Site Scripting (XSS)**

CVE ID : CVE-2025-58194
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 12 minutes ago
Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder allows Stored XSS. This issue affects Bold Page Builder: from n/a through 5.4.3.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-58195 - Xpro Elementor Addons Cross-site Scripting

CVE ID : CVE-2025-58195
Published : Aug. 27, 2025, 6:15 p.m. | 2 hours, 12 minutes ago
Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS. This issue affects Xpro Elementor Addons: from n/a through 1.4.17.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 18:15:00 GMT

CVE-2025-57821 - Basecamp Open-Redirect Vulnerability

CVE ID : CVE-2025-57821
Published : Aug. 27, 2025, 5:15 p.m. | 2 hours, 3 minutes ago
Description : Basecamp's Google Sign-In adds Google sign-in to Rails applications. Prior to version 1.3.0, it is possible to craft a malformed URL that passes the "same origin" check, resulting in the user being redirected to another origin. Rails applications configured to store the flash information in a session cookie may be vulnerable, if this can be chained with an attack that allows injection of arbitrary data into the session cookie. This issue has been patched in version 1.3.0. If upgrading is not possible at this time, a way to mitigate the chained attack can be done by explicitly setting SameSite=Lax or SameSite=Strict on the application session cookie.
Severity: 4.2 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-5187 - Kubernetes NodeRestriction OwnerReference Deletion Vulnerability

CVE ID : CVE-2025-5187
Published : Aug. 27, 2025, 5:15 p.m. | 2 hours, 3 minutes ago
Description : A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference resource does not exist or is subsequently deleted, the given node object will be deleted via garbage collection.
Severity: 6.7 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-20241 - Cisco Nexus IS-IS Protocol Denial of Service Vulnerability

CVE ID : CVE-2025-20241
Published : Aug. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago
Description : A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the IS-IS process to unexpectedly restart, which could cause an affected device to reload. This vulnerability is due to insufficient input validation when parsing an ingress IS-IS packet. An attacker could exploit this vulnerability by sending a crafted IS-IS packet to an affected device. A successful exploit could allow the attacker to cause the unexpected restart of the IS-IS process, which could cause the affected device to reload, resulting in a denial of service (DoS) condition. Note: The IS-IS protocol is a routing protocol. To exploit this vulnerability, an attacker must be Layer 2-adjacent to the affected device.
Severity: 7.4 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-20262 - Cisco Nexus PIM6 Ephemeral Query Processing Remote Denial of Service

CVE ID : CVE-2025-20262
Published : Aug. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago
Description : A vulnerability in the Protocol Independent Multicast Version 6 (PIM6) feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, low-privileged, remote attacker to trigger a crash of the PIM6 process, resulting in a denial of service (DoS) condition. This vulnerability is due to improper processing of PIM6 ephemeral data queries. An attacker could exploit this vulnerability by sending a crafted ephemeral query to an affected device through one of the following methods: NX-API REST, NETCONF, RESTConf, gRPC, or Model Driven Telemetry. A successful exploit could allow the attacker to cause the PIM6 process to crash and restart, causing potential adjacency flaps and resulting in a DoS of the PIM6 and ephemeral query processes.
Severity: 5.0 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-20290 - Cisco NX-OS Software Insecure Logging Disclosure

CVE ID : CVE-2025-20290
Published : Aug. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago
Description : A vulnerability in the logging feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches, Cisco Nexus 9000 Series Switches in standalone NX-OS mode, Cisco UCS 6400 Fabric Interconnects, Cisco UCS 6500 Series Fabric Interconnects, and Cisco UCS 9108 100G Fabric Interconnects could allow an authenticated, local attacker access to sensitive information. This vulnerability is due to improper logging of sensitive information. An attacker could exploit this vulnerability by accessing log files on the file system where they are stored. A successful exploit could allow the attacker to access sensitive information, such as stored credentials.
Severity: 5.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-20292 - Cisco NX-OS CLI Command Injection Vulnerability

CVE ID : CVE-2025-20292
Published : Aug. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago
Description : A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted input as the argument of an affected CLI command. A successful exploit could allow the attacker to read and write files on the underlying operating system with the privileges of a non-root user account. File system access is limited to the permissions that are granted to that non-root user account.
Severity: 4.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-20294 - Cisco UCS Manager Software CLI and Web-Based Management Interface Command Injection Vulnerabilities

CVE ID : CVE-2025-20294
Published : Aug. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago
Description : Multiple vulnerabilities in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with administrative privileges to perform command injection attacks on an affected system and elevate privileges to root.   These vulnerabilities are due to insufficient input validation of command arguments supplied by the user. An attacker could exploit these vulnerabilities by authenticating to a device and submitting crafted input to the affected commands. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of the affected device with root-level privileges.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-20295 - "Cisco UCS Manager CLI File System Privilege Escalation Vulnerability"

CVE ID : CVE-2025-20295
Published : Aug. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago
Description : A vulnerability in the CLI of Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to read or create a file or overwrite any file on the file system of the underlying operating system of an affected device, including system files.   This vulnerability is due to insufficient input validation of command arguments supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to read or create a file or overwrite any file on the file system of the underlying operating system of the affected device, including system files. To exploit this vulnerability, the attacker must have valid administrative credentials on the affected device.
Severity: 6.0 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-20296 - Cisco UCS Manager Software Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-20296
Published : Aug. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago
Description : A vulnerability in the web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious data into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must be a member of the Administrator or AAA Administrator role.
Severity: 5.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-20317 - Cisco IMC vKVM Cross-Site Scripting (XSS)

CVE ID : CVE-2025-20317
Published : Aug. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago
Description : A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to redirect a user to a malicious website. This vulnerability is due to insufficient verification of vKVM endpoints. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious webpage and potentially capture user credentials. Note: The affected vKVM client is also included in Cisco UCS Manager.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-20342 - "Cisco IMC vKVM Stored XSS"

CVE ID : CVE-2025-20342
Published : Aug. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago
Description : A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with low privileges to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into a specific data field in the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have valid user credentials with privileges that allow for vKVM access on the affected device. Note: The affected vKVM client is also included in Cisco UCS Manager.
Severity: 5.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-20344 - Cisco Nexus Dashboard Path Traversal Vulnerability

CVE ID : CVE-2025-20344
Published : Aug. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago
Description : A vulnerability in the backup restore functionality of Cisco Nexus Dashboard could allow an authenticated, remote attacker to conduct a path traversal attack on an affected device. This vulnerability is due to insufficient validation of the contents of a backup file. An attacker with valid Administrator credentials could exploit this vulnerability by restoring a crafted backup file to an affected device. A successful exploit could allow the attacker to gain root privileges on the underlying shell on the affected device.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-20347 - "Cisco Nexus Dashboard and NDFC REST API Endpoint Authorization Bypass"

CVE ID : CVE-2025-20347
Published : Aug. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago
Description : A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload and modify files on an affected device. This vulnerability exists because of missing authorization controls on some REST API endpoints. An attacker could exploit th vulnerability by sending crafted API requests to an affected endpoint. A successful exploit could allow the attacker to perform limited Administrator functions, such as accessing sensitive information regarding HTTP Proxy and NTP configurations, uploading images, and damaging image files on an affected device.
Severity: 5.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-20348 - Cisco Nexus Dashboard and Fabric Controller Unauthorized File Access and Modification

CVE ID : CVE-2025-20348
Published : Aug. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago
Description : A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload and modify files on an affected device. This vulnerability exists because of missing authorization controls on some REST API endpoints. An attacker could exploit th vulnerability by sending crafted API requests to an affected endpoint. A successful exploit could allow the attacker to perform limited Administrator functions, such as accessing sensitive information regarding HTTP Proxy and NTP configurations, uploading images, and damaging image files on an affected device.
Severity: 5.0 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-34157 - Coolify Stored XSS Vulnerability

CVE ID : CVE-2025-34157
Published : Aug. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago
Description : Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-site scripting (XSS) attack in the project creation workflow. An authenticated user with low privileges can create a project with a maliciously crafted name containing embedded JavaScript. When an administrator attempts to delete the project or its associated resource, the payload executes in the admin’s browser context. This results in full compromise of the Coolify instance, including theft of API tokens, session cookies, and access to WebSocket-based terminal sessions on managed servers.
Severity: 9.4 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-34159 - Coolify Docker Compose Remote Code Execution Vulnerability

CVE ID : CVE-2025-34159
Published : Aug. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago
Description : Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a remote code execution vulnerability in the application deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary Docker Compose directives during project creation. By crafting a malicious service definition that mounts the host root filesystem, an attacker can gain full root access to the underlying server.
Severity: 9.4 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-34161 - Coolify Remote Code Execution Vulnerability

CVE ID : CVE-2025-34161
Published : Aug. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago
Description : Coolify versions prior to v4.0.0-beta.420.7 are vulnerable to a remote code execution vulnerability in the project deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary shell commands via the Git Repository field during project creation. By submitting a crafted repository string containing command injection syntax, an attacker can execute arbitrary commands on the underlying host system, resulting in full server compromise.
Severity: 9.4 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-50428 - RaspAP Raspap-webgui Command Injection Vulnerability

CVE ID : CVE-2025-50428
Published : Aug. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago
Description : In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the includes/hostapd.php script. The vulnerability is due to improper sanitizing of user input passed via the interface parameter.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-50977 - Apache Wicket Template Injection Cross-Site Scripting (XSS)

CVE ID : CVE-2025-50977
Published : Aug. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago
Description : A template injection vulnerability leading to reflected cross-site scripting (XSS) has been identified in version 1.7.1, requiring authenticated admin access for exploitation. The vulnerability exists in the 'r' parameter and allows attackers to inject malicious Angular expressions that execute JavaScript code in the context of the application. The flaw can be exploited through GET requests to the summary endpoint as well as POST requests to specific Wicket interface endpoints, though the GET method provides easier weaponization. This vulnerability enables authenticated administrators to execute arbitrary client-side code, potentially leading to session hijacking, data theft, or further privilege escalation attacks.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 17:15:00 GMT

CVE-2025-50978 - Gitblit Reflected Cross-Site Scripting (XSS) Vulnerability

CVE ID : CVE-2025-50978
Published : Aug. 27, 2025, 4:15 p.m. | 2 hours, 3 minutes ago
Description : In Gitblit v1.7.1, a reflected cross-site scripting (XSS) vulnerability exists in the way repository path names are handled. By injecting a specially crafted path payload an attacker can cause arbitrary JavaScript to execute when a victim views the manipulated URL. This flaw stems from insufficient input sanitization of filename elements.
Severity: 6.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 16:15:00 GMT

CVE-2025-50983 - Readarr SQLite Database SQL Injection

CVE ID : CVE-2025-50983
Published : Aug. 27, 2025, 4:15 p.m. | 2 hours, 3 minutes ago
Description : SQL Injection vulnerability exists in the sortKey parameter of the GET /api/v1/wanted/cutoff API endpoint in readarr 0.4.15.2787. The endpoint fails to properly sanitize user-supplied input, allowing attackers to inject and execute arbitrary SQL commands against the backend SQLite database. Sqlmap confirmed exploitation via stacked queries, demonstrating that the parameter can be abused to run arbitrary SQL statements. A heavy query was executed using SQLite's RANDOMBLOB() and HEX() functions to simulate a time-based payload, indicating deep control over database interactions.
Severity: 8.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 16:15:00 GMT

CVE-2025-50984 - Diskover-Web Elasticsearch Boolean Blind SQL Injection

CVE ID : CVE-2025-50984
Published : Aug. 27, 2025, 4:15 p.m. | 2 hours, 3 minutes ago
Description : diskover-web v2.3.0 Community Edition is vulnerable to multiple boolean-based blind SQL injection flaws in its Elasticsearch configuration form. Unsanitized user input in POST parameters such as ES_PASS, ES_MAXSIZE, ES_TRANSLOGSIZE, ES_TIMEOUT, ES_USER, ES_HOST, ES_PORT, ES_SCROLLSIZE, ES_CHUNKSIZE and others can be crafted to inject arbitrary SQLite expressions wrapped in JSON functions. By exploiting these injection points, an attacker can infer or extract sensitive information from the underlying database without authentication. This issue stems from improper input validation and parameterization in the application's JSON-based query construction.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 16:15:00 GMT

CVE-2025-54598 - eBay Bevy Event CSRF Vulnerability

CVE ID : CVE-2025-54598
Published : Aug. 27, 2025, 4:15 p.m. | 2 hours, 3 minutes ago
Description : The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows CSRF to delete all notifications via the /notifications/delete/ URI.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 16:15:00 GMT

CVE-2025-53105 - GLPI Unauthenticated Rule Reordering Vulnerability

CVE ID : CVE-2025-53105
Published : Aug. 27, 2025, 3:15 p.m. | 3 hours, 3 minutes ago
Description : GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 10.0.0 to before 10.0.19, a connected user without administration rights can change the rules execution order. This issue has been patched in version 10.0.19.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 15:15:00 GMT

CVE-2025-9533 - TOTOLINK T10 Remote Authentication Bypass Vulnerability

CVE ID : CVE-2025-9533
Published : Aug. 27, 2025, 3:15 p.m. | 3 hours, 3 minutes ago
Description : A vulnerability has been found in TOTOLINK T10 4.1.8cu.5241_B20210927. Affected is an unknown function of the file /formLoginAuth.htm. The manipulation of the argument authCode with the input 1 leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 15:15:00 GMT

CVE-2025-50972 - AbanteCart SQL Injection Vulnerability

CVE ID : CVE-2025-50972
Published : Aug. 27, 2025, 3:15 p.m. | 1 hour, 12 minutes ago
Description : SQL Injection vulnerability in AbanteCart 1.4.2, allows unauthenticated attackers to execute arbitrary SQL commands via the tmpl_id parameter to index.php. Three techniques have been demonstrated: error-based injection using a crafted FLOOR-based payload, time-based blind injection via SLEEP(), and UNION-based injection to extract arbitrary data.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 15:15:00 GMT

CVE-2025-50985 - Diskover-web Community Edition Cross-Site Scripting (XSS)

CVE ID : CVE-2025-50985
Published : Aug. 27, 2025, 3:15 p.m. | 1 hour, 12 minutes ago
Description : diskover-web v2.3.0 Community Edition is vulnerable to multiple reflected cross-site scripting (XSS) flaws in its web interface. Unsanitized GET parameters including maxage, maxindex, index, path, q (query), and doctype are directly echoed into the HTML response, allowing attackers to inject and execute arbitrary JavaScript when a victim visits a maliciously crafted URL.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 15:15:00 GMT

CVE-2025-50986 - Diskover-web Stored Cross-Site Scripting Vulnerabilities

CVE ID : CVE-2025-50986
Published : Aug. 27, 2025, 3:15 p.m. | 1 hour, 12 minutes ago
Description : diskover-web v2.3.0 Community Edition suffers from multiple stored cross-site scripting (XSS) vulnerabilities in its administrative settings interface. Various configuration fields such as ES_HOST, ES_INDEXREFRESH, ES_PORT, ES_SCROLLSIZE, ES_TRANSLOGSIZE, ES_TRANSLOGSYNCINT, EXCLUDES_FILES, FILE_TYPES[], INCLUDES_DIRS, INCLUDES_FILES, and TIMEZONE do not properly sanitize user-supplied input. Malicious payloads submitted via these parameters are persisted in the application and executed whenever an administrator views or edits the settings page.
Severity: 5.6 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 15:15:00 GMT

CVE-2025-50989 - OPNsense Authenticated Command Injection Vulnerability

CVE ID : CVE-2025-50989
Published : Aug. 27, 2025, 3:15 p.m. | 1 hour, 12 minutes ago
Description : OPNsense 25.1 contains an authenticated command injection vulnerability in its Bridge Interface Edit endpoint (interfaces_bridge_edit.php). The span POST parameter is concatenated into a system-level command without proper sanitization or escaping, allowing an administrator to inject arbitrary shell operators and payloads. Successful exploitation grants RCE with the privileges of the web service (typically root), potentially leading to full system compromise or lateral movement. This vulnerability arises from inadequate input validation and improper handling of user-supplied data in backend command invocations.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 15:15:00 GMT

CVE-2025-52122 - CraftCMS Freeform SSTI Vulnerability

CVE ID : CVE-2025-52122
Published : Aug. 27, 2025, 3:15 p.m. | 1 hour, 12 minutes ago
Description : Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template injection (SSTI) vulnerability, resulting in arbitrary code injection for all users that have access to editing a form (submission title).
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 15:15:00 GMT

CVE-2025-43728 - Dell ThinOS Protection Mechanism Failure Remote Bypass Vulnerability

CVE ID : CVE-2025-43728
Published : Aug. 27, 2025, 2:15 p.m. | 2 hours, 12 minutes ago
Description : Dell ThinOS 10, versions prior to 2508_10.0127, contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Severity: 9.6 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 14:15:00 GMT

CVE-2025-43729 - Dell ThinOS Incorrect Permission Assignment for Critical Resource Vulnerability

CVE ID : CVE-2025-43729
Published : Aug. 27, 2025, 2:15 p.m. | 2 hours, 12 minutes ago
Description : Dell ThinOS 10, versions prior to 2508_10.0127, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Elevation of Privileges and Unauthorized Access.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 14:15:00 GMT

CVE-2025-43730 - Dell ThinOS Command Argument Injection Vulnerability

CVE ID : CVE-2025-43730
Published : Aug. 27, 2025, 2:15 p.m. | 2 hours, 12 minutes ago
Description : Dell ThinOS 10, versions prior to 2508_10.0127, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A local unauthenticated user could potentially exploit this vulnerability leading to Elevation of Privileges and Information disclosure.
Severity: 8.4 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 14:15:00 GMT

CVE-2025-43882 - Dell ThinOS Unverified Ownership Unauthorized Access

CVE ID : CVE-2025-43882
Published : Aug. 27, 2025, 2:15 p.m. | 2 hours, 12 minutes ago
Description : Dell ThinOS 10, versions prior to 2508_10.0127, contains an Unverified Ownership vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Unauthorized Access.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 14:15:00 GMT

CVE-2025-56694 - Lumasoft fotoShare Cloud Authentication Bypass

CVE ID : CVE-2025-56694
Published : Aug. 27, 2025, 2:15 p.m. | 2 hours, 12 minutes ago
Description : Client-side password validation (CWE-602) in lumasoft fotoShare Cloud 2025-03-13 allowing unauthenticated attackers to view password-protected photo albums.
Severity: 5.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 14:15:00 GMT

CVE-2025-9527 - Linksys E1700 Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-9527
Published : Aug. 27, 2025, 2:15 p.m. | 2 hours, 12 minutes ago
Description : A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function QoSSetup of the file /goform/QoSSetup. Performing manipulation of the argument ack_policy results in stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 9.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 14:15:00 GMT

CVE-2025-9528 - Linksys E1700 OS Command Injection Vulnerability

CVE ID : CVE-2025-9528
Published : Aug. 27, 2025, 2:15 p.m. | 2 hours, 12 minutes ago
Description : A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function systemCommand of the file /goform/systemCommand. Executing manipulation of the argument command can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 5.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 14:15:00 GMT

CVE-2025-9529 - Campcodes Payroll Management System Remote File Inclusion Vulnerability

CVE ID : CVE-2025-9529
Published : Aug. 27, 2025, 2:15 p.m. | 2 hours, 12 minutes ago
Description : A weakness has been identified in Campcodes Payroll Management System 1.0. The affected element is the function include of the file /index.php. This manipulation of the argument page causes file inclusion. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 14:15:00 GMT

CVE-2025-9531 - Portabilis i-Educar Agenda Module SQL Injection

CVE ID : CVE-2025-9531
Published : Aug. 27, 2025, 2:15 p.m. | 2 hours, 12 minutes ago
Description : A vulnerability was detected in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet/agenda.php of the component Agenda Module. Performing manipulation of the argument cod_agenda results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 14:15:00 GMT

CVE-2025-9532 - Portabilis i-Educar SQL Injection Vulnerability

CVE ID : CVE-2025-9532
Published : Aug. 27, 2025, 2:15 p.m. | 2 hours, 12 minutes ago
Description : A flaw has been found in Portabilis i-Educar up to 2.10. This impacts an unknown function of the file /RegraAvaliacao/view. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 14:15:00 GMT

CVE-2025-9525 - Linksys E1700 Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-9525
Published : Aug. 27, 2025, 1:15 p.m. | 3 hours, 12 minutes ago
Description : A flaw has been found in Linksys E1700 1.0.0.4.003. Affected by this vulnerability is the function setWan of the file /goform/setWan. This manipulation of the argument DeviceName/lanIp causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 9.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 13:15:00 GMT

CVE-2025-9526 - Linksys E1700 Remote Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-9526
Published : Aug. 27, 2025, 1:15 p.m. | 3 hours, 12 minutes ago
Description : A vulnerability has been found in Linksys E1700 1.0.0.4.003. Affected by this issue is the function setSysAdm of the file /goform/setSysAdm. Such manipulation of the argument rm_port leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 9.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 13:15:00 GMT

CVE-2025-30059 - Apache PrepareCDExportSQL Injection Vulnerability

CVE ID : CVE-2025-30059
Published : Aug. 27, 2025, 11:15 a.m. | 5 hours, 12 minutes ago
Description : In the PrepareCDExportJSON.pl service, the "getPerfServiceIds" function is vulnerable to SQL injection.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 11:15:00 GMT

CVE-2025-30060 - Apache HTTP Server SQL Injection Vulnerability

CVE ID : CVE-2025-30060
Published : Aug. 27, 2025, 11:15 a.m. | 5 hours, 12 minutes ago
Description : In the ReturnUserUnitsXML.pl service, the "getUserInfo" function is vulnerable to SQL injection through the "UserID" parameter.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 11:15:00 GMT

CVE-2025-30061 - Apache HTTP Server SQL Injection Vulnerability

CVE ID : CVE-2025-30061
Published : Aug. 27, 2025, 11:15 a.m. | 5 hours, 12 minutes ago
Description : In the "utils/Reporter/OpenReportWindow.pl" service, there is an SQL injection vulnerability through the "UserID" parameter.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 11:15:00 GMT

CVE-2025-30063 - Apache HTTP Server Unsecured Configuration File Vulnerability

CVE ID : CVE-2025-30063
Published : Aug. 27, 2025, 11:15 a.m. | 5 hours, 12 minutes ago
Description : The configuration file containing database logins and passwords is readable by any local user.
Severity: 9.4 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 11:15:00 GMT

CVE-2025-30064 - Apache ThrustSession JWT Session Hijacking Vulnerability

CVE ID : CVE-2025-30064
Published : Aug. 27, 2025, 11:15 a.m. | 5 hours, 12 minutes ago
Description : An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to generate a session for any user.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 11:15:00 GMT

CVE-2025-9523 - Tenda AC1206 Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-9523
Published : Aug. 27, 2025, 11:15 a.m. | 5 hours, 12 minutes ago
Description : A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.
Severity: 10.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 11:15:00 GMT

CVE-2025-2313 - HP Print pl Arbitrary Code Execution Vulnerability

CVE ID : CVE-2025-2313
Published : Aug. 27, 2025, 11:15 a.m. | 3 hours, 12 minutes ago
Description : In the Print.pl service, the "uhcPrintServerPrint" function allows execution of arbitrary code via the "CopyCounter" parameter.
Severity: 9.4 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 11:15:00 GMT

CVE-2025-30036 - "Oddział Ward Stored XSS"

CVE ID : CVE-2025-30036
Published : Aug. 27, 2025, 11:15 a.m. | 3 hours, 12 minutes ago
Description : Stored XSS vulnerability exists in the "Oddział" (Ward) module, in the death diagnosis description field, and allows the execution of arbitrary JavaScript code. This can lead to session hijacking of other users and potentially to privilege escalation up to full administrative rights.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 11:15:00 GMT

CVE-2025-30037 - Apache HTTP Server Unauthenticated Remote Access

CVE ID : CVE-2025-30037
Published : Aug. 27, 2025, 11:15 a.m. | 3 hours, 12 minutes ago
Description : The system exposes several endpoints, typically including "/int/" in their path, that should be restricted to internal services, but are instead publicly accessible without authentication to any host able to reach the application server on port 443/tcp.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 11:15:00 GMT

CVE-2025-30038 - CGM CLININET Session ID Leak

CVE ID : CVE-2025-30038
Published : Aug. 27, 2025, 11:15 a.m. | 3 hours, 12 minutes ago
Description : The vulnerability consists of a session ID leak when saving a file downloaded from CGM CLININET. The identifier is exposed through a built-in Windows security feature that stores additional metadata in an NTFS alternate data stream (ADS) for all files downloaded from potentially untrusted sources.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 11:15:00 GMT

CVE-2025-30039 - Apache CliniNET Unauthenticated Session Takeover Vulnerability

CVE ID : CVE-2025-30039
Published : Aug. 27, 2025, 11:15 a.m. | 3 hours, 12 minutes ago
Description : Unauthenticated access to the "/cgi-bin/CliniNET.prd/GetActiveSessions.pl" endpoint allows takeover of any user session logged into the system, including users with admin privileges.
Severity: 9.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 11:15:00 GMT

CVE-2025-30040 - Apache CliniNET Information Disclosure

CVE ID : CVE-2025-30040
Published : Aug. 27, 2025, 11:15 a.m. | 3 hours, 12 minutes ago
Description : The vulnerability allows unauthenticated users to download a file containing session ID data by directly accessing the "/cgi-bin/CliniNET.prd/utils/userlogxls.pl" endpoint.
Severity: 9.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 11:15:00 GMT

CVE-2025-30041 - Apache CliniNET Session ID Exposure Vulnerability

CVE ID : CVE-2025-30041
Published : Aug. 27, 2025, 11:15 a.m. | 3 hours, 12 minutes ago
Description : The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/CliniNET.prd/utils/dblogstat.pl" expose data containing session IDs.
Severity: 9.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 11:15:00 GMT

CVE-2025-30048 - Apache Server Unauthenticated Access to Configuration Credentials

CVE ID : CVE-2025-30048
Published : Aug. 27, 2025, 11:15 a.m. | 3 hours, 12 minutes ago
Description : The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authentication.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 11:15:00 GMT

CVE-2025-30055 - Apache Struts JavaScript Caching Remote Code Execution Vulnerability

CVE ID : CVE-2025-30055
Published : Aug. 27, 2025, 11:15 a.m. | 3 hours, 12 minutes ago
Description : The "system" function receives untrusted input from the user. If the "EnableJSCaching" option is enabled, it is possible to execute arbitrary code provided as the "Module" parameter.
Severity: 9.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 11:15:00 GMT

CVE-2025-30056 - Apache Shell Injection Vulnerability

CVE ID : CVE-2025-30056
Published : Aug. 27, 2025, 11:15 a.m. | 3 hours, 12 minutes ago
Description : The RunCommand function accepts any parameter, which is then passed for execution in the shell. This allows an attacker to execute arbitrary code on the system.
Severity: 9.4 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 11:15:00 GMT

CVE-2025-30057 - Microsoft UHCRTFDoc Command Injection Vulnerability

CVE ID : CVE-2025-30057
Published : Aug. 27, 2025, 11:15 a.m. | 3 hours, 12 minutes ago
Description : In UHCRTFDoc, the filename parameter can be exploited to execute arbitrary code via command injection into the system() call in the ConvertToPDF function.
Severity: 9.4 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 11:15:00 GMT

CVE-2025-30058 - Apache PatientService SQL Injection Vulnerability

CVE ID : CVE-2025-30058
Published : Aug. 27, 2025, 11:15 a.m. | 3 hours, 12 minutes ago
Description : In the PatientService.pl service, the "getPatientIdentifier" function is vulnerable to SQL injection through the "pesel" parameter.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 11:15:00 GMT

CVE-2021-4459 - Sunny Boy Path Traversal Vulnerability

CVE ID : CVE-2021-4459
Published : Aug. 27, 2025, 8:15 a.m. | 6 hours, 12 minutes ago
Description : An authorized remote attacker can access files and directories outside the intended web root, potentially exposing sensitive system information of the affected Sunny Boy devices.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 08:15:00 GMT

CVE-2025-57846 - Fortinet i-Filter Privilege Escalation Vulnerability

CVE ID : CVE-2025-57846
Published : Aug. 27, 2025, 6:15 a.m. | 8 hours, 12 minutes ago
Description : Multiple i-フィルター products contain an issue with incorrect default permissions. If this vulnerability is exploited, a local authenticated attacker may replace a service executable on the system where the product is running, potentially allowing arbitrary code execution with SYSTEM privileges.
Severity: 8.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 06:15:00 GMT

CVE-2025-9511 - iSourcecode Apartment Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9511
Published : Aug. 27, 2025, 6:15 a.m. | 8 hours, 12 minutes ago
Description : A vulnerability was identified in itsourcecode Apartment Management System 1.0. This vulnerability affects unknown code of the file /visitor/addvisitor.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 06:15:00 GMT

CVE-2025-9513 - Apache editso fuso RsaAndAesHandshake Encryption Strength Vulnerability

CVE ID : CVE-2025-9513
Published : Aug. 27, 2025, 6:15 a.m. | 8 hours, 12 minutes ago
Description : A flaw has been found in editso fuso up to 1.0.4-beta.7. This affects the function PenetrateRsaAndAesHandshake of the file src/net/penetrate/handshake/mod.rs. This manipulation of the argument priv_key causes inadequate encryption strength. Remote exploitation of the attack is possible. A high degree of complexity is needed for the attack. The exploitability is reported as difficult.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 06:15:00 GMT

CVE-2025-9514 - "Macrozheng Mall Registration Weak Password Requirements Remote RCE"

CVE ID : CVE-2025-9514
Published : Aug. 27, 2025, 6:15 a.m. | 8 hours, 12 minutes ago
Description : A vulnerability has been found in macrozheng mall up to 1.0.3. This impacts an unknown function of the component Registration. Such manipulation leads to weak password requirements. The attack can be executed remotely. Attacks of this nature are highly complex. The exploitability is said to be difficult. The vendor deleted the GitHub issue for this vulnerability without and explanation.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 06:15:00 GMT

CVE-2025-57797 - Fujitsu ScanSnap Manager Privilege Escalation Vulnerability

CVE ID : CVE-2025-57797
Published : Aug. 27, 2025, 6:15 a.m. | 6 hours, 3 minutes ago
Description : Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command.
Severity: 8.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 06:15:00 GMT

CVE-2025-9510 - iSourcecode Apartment Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9510
Published : Aug. 27, 2025, 5:15 a.m. | 7 hours, 3 minutes ago
Description : A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /branch/addbranch.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 05:15:00 GMT

CVE-2025-48081 - Printeers Print Ship Path Traversal Vulnerability

CVE ID : CVE-2025-48081
Published : Aug. 27, 2025, 5:15 a.m. | 6 hours, 1 minute ago
Description : Path Traversal: '.../...//' vulnerability in Printeers Printeers Print & Ship allows Path Traversal.This issue affects Printeers Print & Ship: from n/a through 1.17.0.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 05:15:00 GMT

CVE-2025-9508 - iSourcecode Apartment Management System SQL Injection

CVE ID : CVE-2025-9508
Published : Aug. 27, 2025, 5:15 a.m. | 6 hours, 1 minute ago
Description : A vulnerability was detected in itsourcecode Apartment Management System 1.0. The impacted element is an unknown function of the file /report/rented_info.php. The manipulation of the argument rsid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 05:15:00 GMT

CVE-2025-9509 - itsourcecode Apartment Management System SQL Injection

CVE ID : CVE-2025-9509
Published : Aug. 27, 2025, 5:15 a.m. | 6 hours, 1 minute ago
Description : A security flaw has been discovered in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/fair_info_all.php. Performing manipulation of the argument fid results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 05:15:00 GMT

CVE-2025-49039 - Mibuthu Link View Stored Cross-Site Scripting

CVE ID : CVE-2025-49039
Published : Aug. 27, 2025, 4:16 a.m. | 7 hours, 1 minute ago
Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mibuthu Link View allows Stored XSS.This issue affects Link View: from n/a through 0.8.0.
Severity: 5.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 04:16:00 GMT

CVE-2025-49040 - Backup Bolt CSRF Vulnerability

CVE ID : CVE-2025-49040
Published : Aug. 27, 2025, 4:16 a.m. | 7 hours, 1 minute ago
Description : Cross-Site Request Forgery (CSRF) vulnerability in Backup Bolt allows Cross Site Request Forgery.This issue affects Backup Bolt: from n/a through 1.4.1.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 04:16:00 GMT

CVE-2025-9504 - Campcodes Online Loan Management System SQL Injection

CVE ID : CVE-2025-9504
Published : Aug. 27, 2025, 4:16 a.m. | 7 hours, 1 minute ago
Description : A vulnerability was detected in Campcodes Online Loan Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=save_plan. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 04:16:00 GMT

CVE-2025-9505 - Campcodes Online Loan Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9505
Published : Aug. 27, 2025, 4:16 a.m. | 7 hours, 1 minute ago
Description : A flaw has been found in Campcodes Online Loan Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_loan_type. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 04:16:00 GMT

CVE-2025-9506 - Campcodes Online Loan Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9506
Published : Aug. 27, 2025, 4:16 a.m. | 7 hours, 1 minute ago
Description : A vulnerability has been found in Campcodes Online Loan Management System 1.0. This affects an unknown part of the file /ajax.php?action=delete_plan. Such manipulation of the argument ID leads to sql injection. The attack may be performed from a remote location. The exploit has been disclosed to the public and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 04:16:00 GMT

CVE-2025-9507 - iSourcecode Apartment Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9507
Published : Aug. 27, 2025, 4:16 a.m. | 7 hours, 1 minute ago
Description : A weakness has been identified in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/visitor_info.php. Executing manipulation of the argument vid can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 04:16:00 GMT

CVE-2025-49035 - "Chaimchaikin Admin Menu Groups Cross-site Scripting"

CVE ID : CVE-2025-49035
Published : Aug. 27, 2025, 4:15 a.m. | 7 hours, 1 minute ago
Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in chaimchaikin Admin Menu Groups allows Stored XSS.This issue affects Admin Menu Groups: from n/a through 0.1.2.
Severity: 5.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 04:15:00 GMT

CVE-2025-7732 - WordPress Lazy Load for Videos Stored Cross-Site Scripting

CVE ID : CVE-2025-7732
Published : Aug. 27, 2025, 3:15 a.m. | 8 hours, 1 minute ago
Description : The Lazy Load for Videos plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its lazy‑loading handlers in all versions up to, and including, 2.18.7 due to insufficient input sanitization and output escaping. The plugin’s JavaScript registration handlers read the client‑supplied 'data-video-title' and 'href' attributes, decode HTML entities by default, and pass them directly into DOM sinks without any escaping or validation. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Severity: 6.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 03:15:00 GMT

CVE-2025-9502 - Campcodes Online Loan Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9502
Published : Aug. 27, 2025, 3:15 a.m. | 8 hours, 1 minute ago
Description : A weakness has been identified in Campcodes Online Loan Management System 1.0. This impacts an unknown function of the file /ajax.php?action=save_payment. Executing manipulation of the argument loan_id can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 03:15:00 GMT

CVE-2025-9503 - Campcodes Online Loan Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9503
Published : Aug. 27, 2025, 3:15 a.m. | 8 hours, 1 minute ago
Description : A security vulnerability has been detected in Campcodes Online Loan Management System 1.0. Affected is an unknown function of the file /ajax.php?action=save_borrower. The manipulation of the argument lastname leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 03:15:00 GMT

CVE-2025-8490 - All-in-One WP Migration and Backup Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-8490
Published : Aug. 27, 2025, 12:15 a.m. | 11 hours, 1 minute ago
Description : The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Import in all versions up to, and including, 7.97 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
Severity: 4.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Wed, 27 Aug 2025 00:15:00 GMT

CVE-2025-35114 - Agiloft Default Credentials Privilege Escalation

CVE ID : CVE-2025-35114
Published : Aug. 26, 2025, 11:15 p.m. | 12 hours, 1 minute ago
Description : Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at least one of the accounts and the credentials could be cracked offline. Users should upgrade to Agiloft Release 30.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-35115 - Agiloft Insecure Package Download Vulnerability

CVE ID : CVE-2025-35115
Published : Aug. 26, 2025, 11:15 p.m. | 12 hours, 1 minute ago
Description : Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. An attacker in a Man-In-the-Middle position could replace or modify the contents of the download URL. Users should upgrade to Agiloft Release 30.
Severity: 9.2 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-57820 - Svelte Devalue Prototype Pollution Vulnerability

CVE ID : CVE-2025-57820
Published : Aug. 26, 2025, 11:15 p.m. | 12 hours, 1 minute ago
Description : Svelte devalue is a utility library. Prior to version 5.3.2, a string passed to devalue.parse could represent an object with a __proto__ property and devalue.parse does not check that an index is numeric. This could result in assigning prototypes to objects and properties, leading to prototype pollution. This issue has been fixed in version 5.3.2
Severity: 7.9 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-9277 - SiteSEO - WordPress Stored Cross-Site Scripting

CVE ID : CVE-2025-9277
Published : Aug. 26, 2025, 11:15 p.m. | 12 hours, 1 minute ago
Description : The SiteSEO – SEO Simplified plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the broken preg_replace expression in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Severity: 6.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-35113 - Agiloft Remote Code Execution Vulnerability

CVE ID : CVE-2025-35113
Published : Aug. 26, 2025, 11:15 p.m. | 9 hours, 12 minutes ago
Description : Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code execution by loading a specially crafted payload. Users should upgrade to Agiloft Release 31.
Severity: 5.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-22411 - Cisco SDP Use After Free Remote Code Execution Vulnerability

CVE ID : CVE-2025-22411
Published : Aug. 26, 2025, 11:15 p.m. | 7 hours, 12 minutes ago
Description : In process_service_attr_rsp of sdp_discovery.cc, there is a possible use after free due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-22412 - Apache SDP Server Use-After-Free Remote Code Execution Vulnerability

CVE ID : CVE-2025-22412
Published : Aug. 26, 2025, 11:15 p.m. | 7 hours, 12 minutes ago
Description : In multiple functions of sdp_server.cc, there is a possible use after free due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-22413 - Apache HTTP Server Privilege Escalation Vulnerability

CVE ID : CVE-2025-22413
Published : Aug. 26, 2025, 11:15 p.m. | 7 hours, 12 minutes ago
Description : In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-26417 - Google Android Confused Deputy Local Information Disclosure

CVE ID : CVE-2025-26417
Published : Aug. 26, 2025, 11:15 p.m. | 7 hours, 12 minutes ago
Description : In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-35112 - Agiloft XML External Entities (XXE)

CVE ID : CVE-2025-35112
Published : Aug. 26, 2025, 11:15 p.m. | 7 hours, 12 minutes ago
Description : Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal on the local system files. Users should upgrade to Agiloft Release 31.
Severity: 4.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-22407 - BlueZ Use After Free Remote Information Disclosure

CVE ID : CVE-2025-22407
Published : Aug. 26, 2025, 11:15 p.m. | 6 hours ago
Description : In hidd_check_config_done of hidd_conn.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-22408 - Citrix NetScaler Use-After-Free Remote Code Execution Vulnerability

CVE ID : CVE-2025-22408
Published : Aug. 26, 2025, 11:15 p.m. | 6 hours ago
Description : In rfc_check_send_cmd of rfc_utils.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-22409 - RFC TS Frames Use After Free Local Privilege Escalation

CVE ID : CVE-2025-22409
Published : Aug. 26, 2025, 11:15 p.m. | 6 hours ago
Description : In rfc_send_buf_uih of rfc_ts_frames.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-22410 - Apache HTTP Server Use-After-Free Remote Code Execution Vulnerability

CVE ID : CVE-2025-22410
Published : Aug. 26, 2025, 11:15 p.m. | 6 hours ago
Description : In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-0086 - Android AccountManager Service Token Overwrite Vulnerability

CVE ID : CVE-2025-0086
Published : Aug. 26, 2025, 11:15 p.m. | 5 hours, 11 minutes ago
Description : In onResult of AccountManagerService.java, there is a possible way to overwrite auth token due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-0092 - Google Android Bond Permission Bypass

CVE ID : CVE-2025-0092
Published : Aug. 26, 2025, 11:15 p.m. | 5 hours, 11 minutes ago
Description : In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-0093 - Android Device AdapterService Remote Information Disclosure Vulnerability

CVE ID : CVE-2025-0093
Published : Aug. 26, 2025, 11:15 p.m. | 5 hours, 11 minutes ago
Description : In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-22403 - "Vulnerability in Google SDP's SDP Disovery Service: Arbitrary Code Execution"

CVE ID : CVE-2025-22403
Published : Aug. 26, 2025, 11:15 p.m. | 5 hours, 11 minutes ago
Description : In sdp_snd_service_search_req of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-22404 - Qualcomm AvCT LCB Act Use After Free Privilege Escalation

CVE ID : CVE-2025-22404
Published : Aug. 26, 2025, 11:15 p.m. | 5 hours, 11 minutes ago
Description : In avct_lcb_msg_ind of avct_lcb_act.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-22405 - Apache HTTP Server Use After Free Arbitrary Code Execution

CVE ID : CVE-2025-22405
Published : Aug. 26, 2025, 11:15 p.m. | 5 hours, 11 minutes ago
Description : In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-22406 - Apache OpenWRT bnep Use After Free Local Privilege Escalation

CVE ID : CVE-2025-22406
Published : Aug. 26, 2025, 11:15 p.m. | 5 hours, 11 minutes ago
Description : In bnepu_check_send_packet of bnep_utils.cc, there is a possible way to achieve code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-0082 - Oracle Java Confused Deputy Image Disclosure

CVE ID : CVE-2025-0082
Published : Aug. 26, 2025, 11:15 p.m. | 3 hours, 59 minutes ago
Description : In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-0083 - Apache HTTP Server Information Disclosure Vulnerability

CVE ID : CVE-2025-0083
Published : Aug. 26, 2025, 11:15 p.m. | 3 hours, 59 minutes ago
Description : In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-0084 - Qualcomm Bluetooth HFP Use After Free Remote Code Execution

CVE ID : CVE-2025-0084
Published : Aug. 26, 2025, 11:15 p.m. | 3 hours, 59 minutes ago
Description : In multiple locations, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Bluetooth, if HFP support is enabled, with no additional execution privileges needed. User interaction is not needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-0081 - Adobe DNG JPEG Uninitialized Data Crash Vulnerability

CVE ID : CVE-2025-0081
Published : Aug. 26, 2025, 11:15 p.m. | 1 hour, 11 minutes ago
Description : In dng_lossless_decoder::HuffDecode of dng_lossless_jpeg.cpp, there is a possible way to cause a crash due to uninitialized data. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 23:15:00 GMT

CVE-2025-9492 - Campcodes Online Water Billing System SQL Injection Vulnerability

CVE ID : CVE-2025-9492
Published : Aug. 26, 2025, 10:15 p.m. | 43 minutes ago
Description : A vulnerability was determined in Campcodes Online Water Billing System 1.0. This affects an unknown function of the file /addclient1.php. Executing manipulation of the argument lname can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. Other parameters might be affected as well.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 22:15:00 GMT

CVE-2024-35203 - Mahara Cross-Site Scripting (XSS) Vulnerability

CVE ID : CVE-2024-35203
Published : Aug. 26, 2025, 9:15 p.m. | 1 hour, 43 minutes ago
Description : Mahara before 22.10.6, 23.04.6, and 24.04.1 allows cross-site scripting (XSS) via a file, with JavaScript code as part of its name, that is uploaded via the Mahara filebrowser system.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 21:15:00 GMT

CVE-2024-47192 - Mahara File Download Vulnerability

CVE ID : CVE-2024-47192
Published : Aug. 26, 2025, 9:15 p.m. | 1 hour, 43 minutes ago
Description : An issue was discovered in Mahara 23.04.8 and 24.04.4. The use of a malicious export download URL can allow an attacker to download files that they do not have permission to download.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 21:15:00 GMT

CVE-2025-50971 - AbanteCart Directory Traversal Vulnerability

CVE ID : CVE-2025-50971
Published : Aug. 26, 2025, 8:15 p.m. | 2 hours, 43 minutes ago
Description : Directory traversal vulnerability in AbanteCart version 1.4.2 allows unauthenticated attackers to gain access to sensitive system files via the template parameter to index.php.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 20:15:00 GMT

CVE-2025-52353 - Badaso CMS Arbitrary Code Execution Vulnerability

CVE ID : CVE-2025-52353
Published : Aug. 26, 2025, 8:15 p.m. | 2 hours, 43 minutes ago
Description : An arbitrary code execution vulnerability in Badaso CMS 2.9.11. The Media Manager allows authenticated users to upload files containing embedded PHP code via the file-upload endpoint, bypassing content-type validation. When such a file is accessed via its URL, the server executes the PHP payload, enabling an attacker to run arbitrary system commands and achieve full compromise of the underlying host. This has been demonstrated by embedding a backdoor within a PDF and renaming it with a .php extension.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 20:15:00 GMT

CVE-2025-55443 - Telpo MDM Plaintext Credentials and MQTT Server Exposure

CVE ID : CVE-2025-55443
Published : Aug. 26, 2025, 8:15 p.m. | 2 hours, 43 minutes ago
Description : Telpo MDM 1.4.6 thru 1.4.9 for Android contains sensitive administrator credentials and MQTT server connection details (IP/port) that are stored in plaintext within log files on the device's external storage. This allows attackers with access to these logs to: 1. Authenticate to the MDM web platform to execute administrative operations (device shutdown/factory reset/software installation); 2. Connect to the MQTT server to intercept/publish device data.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 20:15:00 GMT

CVE-2025-23307 - NVIDIA NeMo Curator Remote Code Execution Vulnerability

CVE ID : CVE-2025-23307
Published : Aug. 26, 2025, 7:15 p.m. | 3 hours, 43 minutes ago
Description : NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 19:15:00 GMT

CVE-2025-23312 - NVIDIA NeMo Framework Code Injection Vulnerability

CVE ID : CVE-2025-23312
Published : Aug. 26, 2025, 7:15 p.m. | 3 hours, 43 minutes ago
Description : NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 19:15:00 GMT

CVE-2025-23313 - NVIDIA NeMo Framework NLP Component Code Injection Vulnerability

CVE ID : CVE-2025-23313
Published : Aug. 26, 2025, 7:15 p.m. | 3 hours, 43 minutes ago
Description : NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 19:15:00 GMT

CVE-2025-23314 - NVIDIA NeMo Framework NLP Code Injection Vulnerability

CVE ID : CVE-2025-23314
Published : Aug. 26, 2025, 7:15 p.m. | 3 hours, 43 minutes ago
Description : NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 19:15:00 GMT

CVE-2025-23315 - NVIDIA NeMo Framework Code Injection Vulnerability

CVE ID : CVE-2025-23315
Published : Aug. 26, 2025, 7:15 p.m. | 3 hours, 43 minutes ago
Description : NVIDIA NeMo Framework for all platforms contains a vulnerability in the export and deploy component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 19:15:00 GMT

CVE-2025-50975 - IPFire Stored XSS in Firewall CGI Interface

CVE ID : CVE-2025-50975
Published : Aug. 26, 2025, 7:15 p.m. | 3 hours, 43 minutes ago
Description : IPFire 2.29 web-based firewall interface (firewall.cgi) fails to sanitize several rule parameters such as PROT, SRC_PORT, TGT_PORT, dnatport, key, ruleremark, src_addr, std_net_tgt, and tgt_addr, allowing an authenticated administrator to inject persistent JavaScript. This stored XSS payload is executed whenever another admin views the firewall rules page, enabling session hijacking, unauthorized actions within the interface, or further internal pivoting. Exploitation requires only high-privilege GUI access, and the complexity of the attack is low.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 19:15:00 GMT

CVE-2025-9478 - Google Chrome ANGLE Use-After-Free Vulnerability

CVE ID : CVE-2025-9478
Published : Aug. 26, 2025, 7:15 p.m. | 3 hours, 43 minutes ago
Description : Use after free in ANGLE in Google Chrome prior to 139.0.7258.154 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 19:15:00 GMT

CVE-2025-50976 - IPFire 2 DNS Management Interface Reflected Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-50976
Published : Aug. 26, 2025, 6:15 p.m. | 4 hours, 43 minutes ago
Description : IPFire 2.29 DNS management interface (dns.cgi) fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLS_HOSTNAME query parameters, resulting in a reflected cross-site scripting (XSS) vulnerability.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 18:15:00 GMT

CVE-2025-55298 - ImageMagick Format String Vulnerability

CVE ID : CVE-2025-55298
Published : Aug. 26, 2025, 6:15 p.m. | 4 hours, 43 minutes ago
Description : ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper sanitization. An attacker can overwrite arbitrary memory regions, enabling a wide range of attacks from heap overflow to remote code execution. This issue has been patched in versions 6.9.13-28 and 7.1.2-2.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 18:15:00 GMT

CVE-2025-57803 - ImageMagick Heap Corruption Vulnerability

CVE ID : CVE-2025-57803
Published : Aug. 26, 2025, 6:15 p.m. | 4 hours, 43 minutes ago
Description : ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2 for ImageMagick's 32-bit build, a 32-bit integer overflow in the BMP encoder’s scanline-stride computation collapses bytes_per_line (stride) to a tiny value while the per-row writer still emits 3 × width bytes for 24-bpp images. The row base pointer advances using the (overflowed) stride, so the first row immediately writes past its slot and into adjacent heap memory with attacker-controlled bytes. This is a classic, powerful primitive for heap corruption in common auto-convert pipelines. This issue has been patched in versions 6.9.13-28 and 7.1.2-2.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 18:15:00 GMT

CVE-2025-57818 - Firecrawl SSRF Vulnerability

CVE ID : CVE-2025-57818
Published : Aug. 26, 2025, 6:15 p.m. | 4 hours, 43 minutes ago
Description : Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to version 2.0.1, a server-side request forgery (SSRF) vulnerability was discovered in Firecrawl's webhook functionality. Authenticated users could configure a webhook to an internal URL and send POST requests with arbitrary headers, which may have allowed access to internal systems. This has been fixed in version 2.0.1. If upgrading is not possible, it is recommend to isolate Firecrawl from any sensitive internal systems.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 18:15:00 GMT

CVE-2025-1994 - IBM Cognos Command Center Deserialization Vulnerability

CVE ID : CVE-2025-1994
Published : Aug. 26, 2025, 5:15 p.m. | 5 hours, 43 minutes ago
Description : IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the BinaryFormatter function.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 17:15:00 GMT

CVE-2025-2697 - IBM Cognos Command Center Open Redirect Vulnerability

CVE ID : CVE-2025-2697
Published : Aug. 26, 2025, 5:15 p.m. | 5 hours, 43 minutes ago
Description : IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
Severity: 7.4 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 17:15:00 GMT

CVE-2025-36729 - "Fortinet Web Interface Unauthorized Access and Privilege Escalation"

CVE ID : CVE-2025-36729
Published : Aug. 26, 2025, 5:15 p.m. | 5 hours, 43 minutes ago
Description : A non-primary administrator user with admin rights to the web interface but without shell access permissions can display configuration of the device including the master admin password. This vulnerability also allows the user to give themselves shell access with the root gid.
Severity: 7.2 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 17:15:00 GMT

CVE-2025-50974 - IPFire Calamaris Log Exporter Remote Code Execution

CVE ID : CVE-2025-50974
Published : Aug. 26, 2025, 5:15 p.m. | 5 hours, 43 minutes ago
Description : The Calamaris log exporter CGI (/cgi-bin/logs.cgi/calamaris.dat) in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter values into a shell command. An unauthenticated remote attacker can inject arbitrary OS commands by embedding shell metacharacters in any of the following parameters BYTE_UNIT, DAY_BEGIN, DAY_END, HIST_LEVEL, MONTH_BEGIN, MONTH_END, NUM_CONTENT, NUM_DOMAINS, NUM_HOSTS, NUM_URLS, PERF_INTERVAL, YEAR_BEGIN, YEAR_END.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 17:15:00 GMT

CVE-2025-52184 - Helpy.io Cross Site Scripting (XSS)

CVE ID : CVE-2025-52184
Published : Aug. 26, 2025, 5:15 p.m. | 5 hours, 43 minutes ago
Description : Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 17:15:00 GMT

CVE-2025-55212 - ImageMagick Denial of Service Vulnerability

CVE ID : CVE-2025-55212
Published : Aug. 26, 2025, 5:15 p.m. | 5 hours, 43 minutes ago
Description : ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2, passing a geometry string containing only a colon (":") to montage -geometry leads GetGeometry() to set width/height to 0. Later, ThumbnailImage() divides by these zero dimensions, triggering a crash (SIGFPE/abort), resulting in a denial of service. This issue has been patched in versions 6.9.13-28 and 7.1.2-2.
Severity: 3.7 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 17:15:00 GMT

CVE-2025-57425 - SourceCodester FAQ Management System Stored XSS Vulnerability

CVE ID : CVE-2025-57425
Published : Aug. 26, 2025, 5:15 p.m. | 5 hours, 43 minutes ago
Description : A Stored Cross-Site Scripting (XSS) vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php endpoint.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 17:15:00 GMT

CVE-2025-9491 - Microsoft Windows LNK File Remote Code Execution Vulnerability

CVE ID : CVE-2025-9491
Published : Aug. 26, 2025, 5:15 p.m. | 5 hours, 43 minutes ago
Description : Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of .LNK files. Crafted data in an .LNK file can cause hazardous content in the file to be invisible to a user who inspects the file via the Windows-provided user interface. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25373.
Severity: 7.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 17:15:00 GMT

CVE-2025-1494 - IBM Cognos Command Center Clickjacking Vulnerability

CVE ID : CVE-2025-1494
Published : Aug. 26, 2025, 5:15 p.m. | 5 hours, 10 minutes ago
Description : IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
Severity: 6.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 17:15:00 GMT

CVE-2025-57810 - jsPDF High CPU Utilization Denial of Service Vulnerability

CVE ID : CVE-2025-57810
Published : Aug. 26, 2025, 4:15 p.m. | 4 hours, 58 minutes ago
Description : jsPDF is a library to generate PDFs in JavaScript. Prior to 3.0.2, user control of the first argument of the addImage method results in CPU utilization and denial of service. If given the possibility to pass unsanitized image data or URLs to the addImage method, a user can provide a harmful PNG file that results in high CPU utilization and denial of service. The vulnerability was fixed in jsPDF 3.0.2.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 16:15:00 GMT

CVE-2025-57813 - traP traQ Exposed OAuth Tokens in SQL Error Logs

CVE ID : CVE-2025-57813
Published : Aug. 26, 2025, 4:15 p.m. | 4 hours, 58 minutes ago
Description : traQ is a messenger application built for Digital Creators Club traP. Prior to version 3.25.0, a vulnerability exists where sensitive information, such as OAuth tokens, are recorded in log files when an error occurs during the execution of an SQL query. An attacker could intentionally trigger an SQL error by methods such as placing a high load on the database. This could allow an attacker who has the authority to view the log files to illicitly acquire the recorded sensitive information. This vulnerability has been patched in version 3.25.0. If upgrading is not possible, a temporary workaround involves reviewing access permissions for SQL error logs and strictly limiting access to prevent unauthorized users from viewing them.
Severity: 5.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 16:15:00 GMT

CVE-2025-56432 - Nagios XI Cross-Site Scripting (XSS)

CVE ID : CVE-2025-56432
Published : Aug. 26, 2025, 4:15 p.m. | 3 hours, 56 minutes ago
Description : A cross-site scripting (XSS) vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in a web component responsible for rendering performance-related data.
Severity: 6.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 16:15:00 GMT

CVE-2025-52219 - SelectZero Data Observability Platform Open Redirect Vulnerability

CVE ID : CVE-2025-52219
Published : Aug. 26, 2025, 3:15 p.m. | 4 hours, 56 minutes ago
Description : SelectZero SelectZero Data Observability Platform before 2025.5.2 contains an Open Redirect vulnerability. Legacy UI fields can be used to create arbitrary external links via HTML Injection.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 15:15:00 GMT

CVE-2025-6366 - WordPress Event List Plugin Privilege Escalation Vulnerability

CVE ID : CVE-2025-6366
Published : Aug. 26, 2025, 3:15 p.m. | 4 hours, 56 minutes ago
Description : The Event List plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.0.4. This is due to the plugin not properly validating a user's capabilities prior to updating their profile in the el_update_profile() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change their capabilities to those of an administrator.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 15:15:00 GMT

CVE-2025-25732 - Kapsch TrafficCom RIS-9160 RIS-9260 Roadside Units EEPROM Access Control Bypass Privilege Escalation

CVE ID : CVE-2025-25732
Published : Aug. 26, 2025, 3:15 p.m. | 3 hours, 7 minutes ago
Description : Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows attackers to replace password hashes stored in the EEPROM with hashes of their own, leading to the escalation of privileges to root.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 15:15:00 GMT

CVE-2025-25733 - Kapsch TrafficCom RIS-9160 RIS-9260 Roadside Units SPI Flash Chip Access Control Bypass

CVE ID : CVE-2025-25733
Published : Aug. 26, 2025, 3:15 p.m. | 3 hours, 7 minutes ago
Description : Incorrect access control in the SPI Flash Chip of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows physically proximate attackers to arbitrarily modify SPI flash regions, leading to a degradation of the security posture of the device.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 15:15:00 GMT

CVE-2025-25734 - Kapsch TrafficCom RIS-9160 RIS-9260 Roadside Units (RSUs) Boot Process Privilege Escalation

CVE ID : CVE-2025-25734
Published : Aug. 26, 2025, 3:15 p.m. | 3 hours, 7 minutes ago
Description : Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 was discovered to contain an unauthenticated EFI shell which allows attackers to execute arbitrary code or escalate privileges during the boot process.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 15:15:00 GMT

CVE-2025-25735 - Kapsch TrafficCom RIS-9160 RIS-9260 Roadside Units (RSUs) SPI Flash Modification Vulnerability

CVE ID : CVE-2025-25735
Published : Aug. 26, 2025, 3:15 p.m. | 3 hours, 7 minutes ago
Description : Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack SPI Protected Range Registers (PRRs), allowing attackers with software running on the system to modify SPI flash in real-time.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 15:15:00 GMT

CVE-2025-25736 - Kapsch TrafficCom RIS-9260 RSU Android Debug Bridge Root Access

CVE ID : CVE-2025-25736
Published : Aug. 26, 2025, 3:15 p.m. | 3 hours, 7 minutes ago
Description : Kapsch TrafficCom RIS-9260 RSU LEO v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to contain Android Debug Bridge (ADB) pre-installed (/mnt/c3platpersistent/opt/platform-tools/adb) and enabled by default, allowing unauthenticated root shell access to the cellular modem via the default 'kapsch' user.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 15:15:00 GMT

CVE-2025-25737 - Kapsch TrafficCom RIS-9160 RIS-9260 Roadside Units (RSUs) Unprotected BIOS Authentication

CVE ID : CVE-2025-25737
Published : Aug. 26, 2025, 3:15 p.m. | 3 hours, 7 minutes ago
Description : Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack secure password requirements for its BIOS Supervisor and User accounts, allowing attackers to bypass authentication via a bruteforce attack.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 15:15:00 GMT

CVE-2025-52035 - NotesCMS Stored XSS Vulnerability

CVE ID : CVE-2025-52035
Published : Aug. 26, 2025, 3:15 p.m. | 3 hours, 7 minutes ago
Description : A vulnerability in NotesCMS and specifically in the page /index.php?route=notes. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as of commit 7d821a0f028b0778b245b99ab3d3bff1ac10e2d3 (dated 2024-05-08) and was fixed in commit 95322c5121dbd7070f3bd54f2848079654a0a8ea (dated 2025-03-31). The attack can be launched remotely.
Severity: 6.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 15:15:00 GMT

CVE-2025-52036 - NotesCMS Stored XSS Vulnerability

CVE ID : CVE-2025-52036
Published : Aug. 26, 2025, 3:15 p.m. | 3 hours, 7 minutes ago
Description : A vulnerability has been found in NotesCMS and classified as medium. Affected by this vulnerability is the page /index.php?route=categories. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as of commit 7d821a0f028b0778b245b99ab3d3bff1ac10e2d3 (dated 2024-05-08), and was fixed in commit 95322c5121dbd7070f3bd54f2848079654a0a8ea (dated 2025-03-31). The attack can be launched remotely. CWE Definition of the Vulnerability: CWE-79.
Severity: 6.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 15:15:00 GMT

CVE-2025-52037 - NotesCMS Stored XSS Vulnerability

CVE ID : CVE-2025-52037
Published : Aug. 26, 2025, 3:15 p.m. | 3 hours, 7 minutes ago
Description : A vulnerability has been found in NotesCMS and classified as medium. Affected by this vulnerability is the page /index.php?route=sites. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as of commit 7d821a0f028b0778b245b99ab3d3bff1ac10e2d3 (dated 2024-05-08), and was fixed in commit 95322c5121dbd7070f3bd54f2848079654a0a8ea (dated 2025-03-31). The attack can be launched remotely. CWE Definition of the Vulnerability: CWE-79.
Severity: 6.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 15:15:00 GMT

CVE-2025-52217 - SelectZero Data Observability Platform HTML Injection Vulnerability

CVE ID : CVE-2025-52217
Published : Aug. 26, 2025, 3:15 p.m. | 3 hours, 7 minutes ago
Description : SelectZero Data Observability Platform before 2025.5.2 is vulnerable to HTML Injection. Legacy UI fields improperly handle user-supplied input, allowing injection of arbitrary HTML.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 15:15:00 GMT

CVE-2025-52218 - SelectZero Data Observability Platform Content Spoofing Vulnerability

CVE ID : CVE-2025-52218
Published : Aug. 26, 2025, 3:15 p.m. | 3 hours, 7 minutes ago
Description : SelectZero Data Observability Platform before 2025.5.2 is vulnerable to Content Spoofing / Text Injection. Improper sanitization of unspecified parameters allows attackers to inject arbitrary text or limited HTML into the login page.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 15:15:00 GMT

CVE-2024-39335 - Mahara Information Disclosure Vulnerability

CVE ID : CVE-2024-39335
Published : Aug. 26, 2025, 3:15 p.m. | 1 hour, 21 minutes ago
Description : Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed to an institution administrator under certain conditions via the 'Current submissions' page: Administration -> Groups -> Submissions.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 15:15:00 GMT

CVE-2024-47853 - Mahara LTI Privilege Escalation Vulnerability

CVE ID : CVE-2024-47853
Published : Aug. 26, 2025, 2:15 p.m. | 2 hours, 21 minutes ago
Description : An issue was discovered in Mahara 23.04.8 and 24.04.4. Attackers may utilize escalation of privileges in certain cases when logging into Mahara with Learning Tools Interoperability (LTI).
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 14:15:00 GMT

CVE-2025-29992 - Mahara Database Connection Information Disclosure

CVE ID : CVE-2025-29992
Published : Aug. 26, 2025, 2:15 p.m. | 2 hours, 21 minutes ago
Description : Mahara before 24.04.9 exposes database connection information if the database becomes unreachable, e.g., due to the database server being temporarily down or too busy.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 14:15:00 GMT

CVE-2025-50753 - Mitrastar GPT-2741GNAC-N2 SSH Command Injection Vulnerability

CVE ID : CVE-2025-50753
Published : Aug. 26, 2025, 2:15 p.m. | 2 hours, 21 minutes ago
Description : Mitrastar GPT-2741GNAC-N2 devices are provided with access through ssh into a restricted default shell.The command "deviceinfo show file" is supposed to be used from restricted shell to show files and directories. By providing " /bin/sh" (quotes included) to the argument of this command will drop a root shell.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 14:15:00 GMT

CVE-2025-55526 - n8n-workflows Directory Traversal Vulnerability

CVE ID : CVE-2025-55526
Published : Aug. 26, 2025, 2:15 p.m. | 2 hours, 21 minutes ago
Description : n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow function within api_server.py
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 14:15:00 GMT

CVE-2025-8424 - Citrix NetScaler ADC and Gateway Unauthenticated Remote Command Injection

CVE ID : CVE-2025-8424
Published : Aug. 26, 2025, 2:15 p.m. | 2 hours, 21 minutes ago
Description : Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 14:15:00 GMT

CVE-2025-9481 - Linksys Router Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-9481
Published : Aug. 26, 2025, 2:15 p.m. | 2 hours, 21 minutes ago
Description : A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function setIpv6 of the file /goform/setIpv6. The manipulation of the argument tunrd_Prefix leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 9.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 14:15:00 GMT

CVE-2025-9482 - "Linksys Wireless Router Stack-Based Buffer Overflow Vulnerability"

CVE ID : CVE-2025-9482
Published : Aug. 26, 2025, 2:15 p.m. | 2 hours, 21 minutes ago
Description : A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This impacts the function portRangeForwardAdd of the file /goform/portRangeForwardAdd. The manipulation of the argument ruleName/schedule/inboundFilter/TCPPorts/UDPPorts results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 9.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 14:15:00 GMT

CVE-2025-9483 - Linksys RE Series Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-9483
Published : Aug. 26, 2025, 2:15 p.m. | 2 hours, 21 minutes ago
Description : A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected is the function singlePortForwardAdd of the file /goform/singlePortForwardAdd. This manipulation of the argument ruleName/schedule/inboundFilter causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 9.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 14:15:00 GMT

CVE-2024-45753 - Mahara External RSS Feed Block Cross-Site Scripting (XSS)

CVE ID : CVE-2024-45753
Published : Aug. 26, 2025, 2:15 p.m. | 2 hours, 11 minutes ago
Description : In Mahara 23.04.8 and 24.04.4, the external RSS feed block can cause XSS if the external feed XML has a malicious value for the link attribute.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 14:15:00 GMT

CVE-2025-8700 - Invoice Ninja macOS Debugging Entitlement Vulnerability

CVE ID : CVE-2025-8700
Published : Aug. 26, 2025, 1:15 p.m. | 3 hours, 11 minutes ago
Description : Invoice Ninja's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access (e.g. via a malicious application) to attach a debugger, read or modify the process memory, inject code in the application's context despite being signed with Hardened Runtime and bypass Transparency, Consent, and Control (TCC). Acquired resource access is limited to previously granted permissions by the user. Access to other resources beyond granted permissions requires user interaction with a system prompt asking for permission. According to Apple documentation, when a non-root user runs an app with the debugging tool entitlement, the system presents an authorization dialog asking for a system administrator's credentials. Since there is no prompt when the target process has "get-task-allow" entitlement, the presence of this entitlement was decided to be treated as a vulnerability because it removes one step needed to perform an attack. This issue was fixed in version 5.0.175
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 13:15:00 GMT

CVE-2025-9190 - "Cursor macOS Local Privilege Escalation (Unauthenticated Code Execution)"

CVE ID : CVE-2025-9190
Published : Aug. 26, 2025, 1:15 p.m. | 3 hours, 11 minutes ago
Description : The configuration of Cursor on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Cursor TCC (Transparency, Consent, and Control) permissions. Acquired resource access is limited to previously granted permissions by the user. Accessing other resources beyond previously granted TCC permissions will prompt the user for approval in the name of Cursor, potentially disguising attacker's malicious intent. This issue was detected in 15.4.1 version of Cursor. Project maintainers decided not to fix this issue, because a scenario including a local attacker falls outside their defined threat model.
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 13:15:00 GMT

CVE-2025-38676 - "AMD IOMMU Stack Buffer Overflow"

CVE ID : CVE-2025-38676
Published : Aug. 26, 2025, 1:15 p.m. | 1 hour, 21 minutes ago
Description : In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 13:15:00 GMT

CVE-2025-53811 - Mosh-Pro macOS RunAsNode Arbitrary Code Execution

CVE ID : CVE-2025-53811
Published : Aug. 26, 2025, 1:15 p.m. | 1 hour, 21 minutes ago
Description : The configuration of Mosh-Pro on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Mosh-Pro TCC (Transparency, Consent, and Control) permissions.  Acquired resource access is limited to previously granted permissions by the user. Accessing other resources beyond previously granted TCC permissions will prompt the user for approval in the name of Mosh-Pro, potentially disguising attacker's malicious intent.  This issue was detected in 1.3.2 version of Mosh-Pro. Since authors did not respond to messages from CNA, patching status is unknown.
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 13:15:00 GMT

CVE-2025-53813 - Nozbe macOS Arbitrary Code Execution (TCC Permission Escalation)

CVE ID : CVE-2025-53813
Published : Aug. 26, 2025, 1:15 p.m. | 1 hour, 21 minutes ago
Description : The configuration of Nozbe on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Nozbe TCC (Transparency, Consent, and Control) permissions.  Acquired resource access is limited to previously granted permissions by the user. Access to other resources beyond granted-permissions requires user interaction with a system prompt asking for permission. This issue was fixed in version 2025.11 of Nozbe.
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 13:15:00 GMT

CVE-2025-7775 - Citrix NetScaler Remote Code Execution and Denial of Service Vulnerability

CVE ID : CVE-2025-7775
Published : Aug. 26, 2025, 1:15 p.m. | 1 hour, 21 minutes ago
Description : Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers (OR) CR virtual server with type HDX
Severity: 9.2 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 13:15:00 GMT

CVE-2025-7776 - Citrix NetScaler Memory Overflow Denial of Service

CVE ID : CVE-2025-7776
Published : Aug. 26, 2025, 1:15 p.m. | 1 hour, 21 minutes ago
Description : Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) with PCoIP Profile bounded to it
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 13:15:00 GMT

CVE-2025-8597 - MacVim macOS Local Debugger Bypass

CVE ID : CVE-2025-8597
Published : Aug. 26, 2025, 1:15 p.m. | 1 hour, 21 minutes ago
Description : MacVim's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access (e.g. via a malicious application) to attach a debugger, read or modify the process memory, inject code in the application's context despite being signed with Hardened Runtime and bypass Transparency, Consent, and Control (TCC). Acquired resource access is limited to previously granted permissions by the user. Access to other resources beyond granted permissions requires user interaction with a system prompt asking for permission. According to Apple documentation, when a non-root user runs an app with the debugging tool entitlement, the system presents an authorization dialog asking for a system administrator's credentials. Since there is no prompt when the target process has "get-task-allow" entitlement, the presence of this entitlement was decided to be treated as a vulnerability because it removes one step needed to perform an attack. This issue was fixed in build r181.2
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 13:15:00 GMT

CVE-2025-1501 - CMC Unauthenticated Access Control Bypass

CVE ID : CVE-2025-1501
Published : Aug. 26, 2025, 11:15 a.m. | 3 hours, 21 minutes ago
Description : An access control vulnerability was discovered in the Request Trace and Download Trace functionalities of CMC before 25.1.0 due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can request and download trace files due to improper access restrictions, potentially exposing unauthorized network data.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 11:15:00 GMT

CVE-2025-44002 - TeamViewer RCE

CVE ID : CVE-2025-44002
Published : Aug. 26, 2025, 11:15 a.m. | 3 hours, 21 minutes ago
Description : Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows allows a local non-admin user to create arbitrary files with SYSTEM privileges, potentially leading to a denial-of-service condition, via symbolic link manipulation during directory verification.
Severity: 6.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 11:15:00 GMT

CVE-2025-29901 - Asustor File Station NULL Pointer Dereference Denial of Service

CVE ID : CVE-2025-29901
Published : Aug. 26, 2025, 10:15 a.m. | 4 hours, 21 minutes ago
Description : A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4933 and later
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 10:15:00 GMT

CVE-2025-48108 - Mojoomla School Management Missing Authorization Vulnerability

CVE ID : CVE-2025-48108
Published : Aug. 26, 2025, 10:15 a.m. | 4 hours, 21 minutes ago
Description : Missing Authorization vulnerability in Mojoomla School Management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects School Management: from n/a through 93.2.0.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 10:15:00 GMT

CVE-2025-6247 - "WordPress Automatic Plugin CSRF Vulnerability"

CVE ID : CVE-2025-6247
Published : Aug. 26, 2025, 9:15 a.m. | 5 hours, 21 minutes ago
Description : The WordPress Automatic Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.118.0. This is due to missing or incorrect nonce validation on one of its functions. This makes it possible for unauthenticated attackers to update campaigns and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Severity: 4.7 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 09:15:00 GMT

CVE-2025-53418 - Delta Electronics COMMGR Stack-based Buffer Overflow

CVE ID : CVE-2025-53418
Published : Aug. 26, 2025, 7:15 a.m. | 7 hours, 21 minutes ago
Description : Delta Electronics COMMGR has Stack-based Buffer Overflow vulnerability.
Severity: 8.6 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 07:15:00 GMT

CVE-2025-53419 - Delta Electronics COMMGR Code Injection Vulnerability

CVE ID : CVE-2025-53419
Published : Aug. 26, 2025, 7:15 a.m. | 7 hours, 21 minutes ago
Description : Delta Electronics COMMGR has Code Injection vulnerability.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 07:15:00 GMT

CVE-2025-57704 - Delta Electronics EIP Builder XML External Entity Information Disclosure

CVE ID : CVE-2025-57704
Published : Aug. 26, 2025, 7:15 a.m. | 7 hours, 21 minutes ago
Description : Delta Electronics EIP Builder version 1.11 is vulnerable to a File Parsing XML External Entity Processing Information Disclosure Vulnerability.
Severity: 5.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 07:15:00 GMT

CVE-2024-8860 - Tourfic for WordPress Unauthenticated Data Modification Vulnerability

CVE ID : CVE-2024-8860
Published : Aug. 26, 2025, 7:15 a.m. | 7 hours, 3 minutes ago
Description : The Tourfic plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tf_order_status_email_resend_function, tf_visitor_details_edit_function, tf_checkinout_details_edit_function, tf_order_status_edit_function, tf_order_bulk_action_edit_function, tf_remove_room_order_ids, and tf_delete_old_review_fields functions in all versions up to, and including, 2.14.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to resend order status emails, update visitor/order details, edit check-in/out details, edit order status, perform bulk order status updates, remove room order IDs, and delete old review fields, respectively.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 07:15:00 GMT

Les derniers articles scientifiques co-écrits par des agents issus des labos de l’ANSSI

Les derniers articles scientifiques co-écrits par des agents issus des labos de l’ANSSI

Tue, 26 Aug 2025 07:00:00 GMT

CVE-2025-41702 - EgOS WebGUI Cryptographic Key Disclosure Vulnerability

CVE ID : CVE-2025-41702
Published : Aug. 26, 2025, 6:15 a.m. | 8 hours, 3 minutes ago
Description : The JWT secret key is embedded in the egOS WebGUI backend and is readable to the default user. An unauthenticated remote attacker can generate valid HS256 tokens and bypass authentication/authorization due to the use of hard-coded cryptographic key.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 06:15:00 GMT

CVE-2025-9475 - SourceCodester Human Resource Information System Unrestricted File Upload Vulnerability

CVE ID : CVE-2025-9475
Published : Aug. 26, 2025, 6:15 a.m. | 8 hours, 3 minutes ago
Description : A flaw has been found in SourceCodester Human Resource Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin_Dashboard/process/editemployee_process.php. This manipulation of the argument employee_file201 causes unrestricted upload. The attack may be initiated remotely. The exploit has been published and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 06:15:00 GMT

CVE-2025-9476 - SourceCodester Human Resource Information System Unrestricted File Upload Vulnerability

CVE ID : CVE-2025-9476
Published : Aug. 26, 2025, 6:15 a.m. | 8 hours, 3 minutes ago
Description : A vulnerability has been found in SourceCodester Human Resource Information System 1.0. Affected by this issue is some unknown functionality of the file /Superadmin_Dashboard/process/editemployee_process.php. Such manipulation of the argument employee_file201 leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 06:15:00 GMT

CVE-2025-5931 - Dokan Pro WordPress Privilege Escalation via Account Takeover

CVE ID : CVE-2025-5931
Published : Aug. 26, 2025, 5:15 a.m. | 9 hours, 3 minutes ago
Description : The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.5. This is due to the plugin not properly validating a user's identity prior to updating their password during a staff password reset. This makes it possible for authenticated attackers, with vendor-level access and above, to elevate their privilege to the level of a staff member and then change arbitrary user passwords, including those of administrators in order to gain access to their accounts. By default, the plugin allows customers to become vendors.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 05:15:00 GMT

CVE-2025-9472 - iSourcecode Apartment Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9472
Published : Aug. 26, 2025, 5:15 a.m. | 9 hours, 3 minutes ago
Description : A vulnerability was found in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /owner_utility/add_owner_utility.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 05:15:00 GMT

CVE-2025-9473 - SourceCodester Online Bank Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9473
Published : Aug. 26, 2025, 5:15 a.m. | 9 hours, 3 minutes ago
Description : A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 05:15:00 GMT

CVE-2025-9474 - Mihomo Party Local File Inclusion Vulnerability

CVE ID : CVE-2025-9474
Published : Aug. 26, 2025, 5:15 a.m. | 9 hours, 3 minutes ago
Description : A vulnerability was detected in Mihomo Party up to 1.8.1 on macOS. Affected is the function enableSysProxy of the file src/main/sys/sysproxy.ts of the component Socket Handler. The manipulation results in creation of temporary file with insecure permissions. The attack requires a local approach. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit is now public and may be used.
Severity: 4.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 05:15:00 GMT

CVE-2025-9471 - iSourcecode Apartment Management System SQL Injection

CVE ID : CVE-2025-9471
Published : Aug. 26, 2025, 4:16 a.m. | 10 hours, 3 minutes ago
Description : A vulnerability has been found in itsourcecode Apartment Management System 1.0. This vulnerability affects unknown code of the file /maintenance/add_maintenance_cost.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 04:16:00 GMT

CVE-2025-9470 - iSourcecode Apartment Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9470
Published : Aug. 26, 2025, 4:16 a.m. | 8 hours, 51 minutes ago
Description : A flaw has been found in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /management/add_m_committee.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 04:16:00 GMT

CVE-2025-9172 - WordPress Vibes Plugin SQL Injection Vulnerability

CVE ID : CVE-2025-9172
Published : Aug. 26, 2025, 4:15 a.m. | 8 hours, 51 minutes ago
Description : The Vibes plugin for WordPress is vulnerable to time-based SQL Injection via the ‘resource’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 04:15:00 GMT

CVE-2025-9468 - iSourcecode Apartment Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9468
Published : Aug. 26, 2025, 4:15 a.m. | 8 hours, 51 minutes ago
Description : A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /bill/add_bill.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 04:15:00 GMT

CVE-2025-9469 - iSourcecode Apartment Management System SQL Injection

CVE ID : CVE-2025-9469
Published : Aug. 26, 2025, 4:15 a.m. | 8 hours, 51 minutes ago
Description : A vulnerability was detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /fund/add_fund.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 04:15:00 GMT

CVE-2025-9443 - Tenda CH22 Buffer Overflow Vulnerability

CVE ID : CVE-2025-9443
Published : Aug. 26, 2025, 3:15 a.m. | 9 hours, 51 minutes ago
Description : A flaw has been found in Tenda CH22 1.0.0.1. This vulnerability affects the function formeditUserName of the file /goform/editUserName. Executing manipulation of the argument new_account can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.
Severity: 9.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 03:15:00 GMT

CVE-2025-9444 - "1000projects Online Project Report Submission and Evaluation System SQL Injection Vulnerability"

CVE ID : CVE-2025-9444
Published : Aug. 26, 2025, 3:15 a.m. | 9 hours, 51 minutes ago
Description : A vulnerability has been found in 1000projects Online Project Report Submission and Evaluation System 1.0. This issue affects some unknown processing of the file /admin/controller/delete_group_student.php. The manipulation of the argument batch_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 03:15:00 GMT

CVE-2025-9461 - Diyhi BBS File Compression Handler Information Disclosure Vulnerability

CVE ID : CVE-2025-9461
Published : Aug. 26, 2025, 3:15 a.m. | 9 hours, 51 minutes ago
Description : A weakness has been identified in diyhi bbs up to 6.8. The impacted element is an unknown function of the file src/main/java/cms/web/action/filePackage/FilePackageManageAction.java of the component File Compression Handler. This manipulation of the argument idGroup causes information disclosure. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 03:15:00 GMT

CVE-2025-9440 - Apache 1000projects Online Project Report Submission and Evaluation System Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-9440
Published : Aug. 26, 2025, 2:15 a.m. | 10 hours, 51 minutes ago
Description : A security vulnerability has been detected in 1000projects Online Project Report Submission and Evaluation System 1.0. Affected by this issue is some unknown functionality of the file /admin/add_title.php. Such manipulation of the argument Title leads to cross site scripting. The attack may be performed from a remote location. The exploit has been disclosed publicly and may be used.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 02:15:00 GMT

CVE-2025-9438 - 1000projects Online Project Report Submission and Evaluation System Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-9438
Published : Aug. 26, 2025, 2:15 a.m. | 8 hours, 48 minutes ago
Description : A security flaw has been discovered in 1000projects Online Project Report Submission and Evaluation System 1.0. Affected is an unknown function of the file /admin/add_student.php. The manipulation of the argument address results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be exploited.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 02:15:00 GMT

CVE-2025-9439 - Apache 1000projects Online Project Report Submission and Evaluation System Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-9439
Published : Aug. 26, 2025, 2:15 a.m. | 8 hours, 48 minutes ago
Description : A weakness has been identified in 1000projects Online Project Report Submission and Evaluation System 1.0. Affected by this vulnerability is an unknown functionality of the file /rse/admin/edit_faculty.php?id=2. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 02:15:00 GMT

CVE-2025-8447 - GitHub Enterprise Server Code Access Bypass

CVE ID : CVE-2025-8447
Published : Aug. 26, 2025, 2:15 a.m. | 6 hours, 45 minutes ago
Description : An improper access control vulnerability was identified in GitHub Enterprise Server that allowed users with access to any repository to retrieve limited code content from another repository by creating a diff between the repositories. To exploit this vulnerability, an attacker needed to know the name of a private repository along with its branches, tags, or commit SHAs that they could use to trigger compare/diff functionality and retrieve limited code without proper authorization. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.18, and was fixed in versions 3.14.17, 3.15.12, 3.16.8 and 3.17.5. This vulnerability was reported via the GitHub Bug Bounty program.
Severity: 7.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 02:15:00 GMT

CVE-2025-9433 - Mtons MBlog Remote Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-9433
Published : Aug. 26, 2025, 2:15 a.m. | 6 hours, 45 minutes ago
Description : A vulnerability was found in mtons mblog up to 3.5.0. The impacted element is an unknown function of the file /admin/user/list of the component Admin Panel. Performing manipulation of the argument Name results in cross site scripting. The attack may be initiated remotely. The exploit has been made public and could be used.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 02:15:00 GMT

CVE-2025-9434 - "1000projects Online Project Report Submission and Evaluation System Cross-Site Scripting Vulnerability"

CVE ID : CVE-2025-9434
Published : Aug. 26, 2025, 2:15 a.m. | 6 hours, 45 minutes ago
Description : A vulnerability was determined in 1000projects Online Project Report Submission and Evaluation System 1.0. This affects an unknown function of the file /admin/edit_title.php?id=1. Executing manipulation of the argument desc can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 02:15:00 GMT

CVE-2025-9430 - Mtons Mblog Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-9430
Published : Aug. 26, 2025, 1:15 a.m. | 5 hours, 3 minutes ago
Description : A vulnerability was detected in mtons mblog up to 3.5.0. This issue affects some unknown processing of the file /admin/options/update. The manipulation of the argument input results in cross site scripting. It is possible to launch the attack remotely. The exploit is now public and may be used.
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 01:15:00 GMT

CVE-2025-9431 - Mtons MBlog Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-9431
Published : Aug. 26, 2025, 1:15 a.m. | 5 hours, 3 minutes ago
Description : A flaw has been found in mtons mblog up to 3.5.0. Impacted is an unknown function of the file /search. This manipulation of the argument kw causes cross site scripting. The attack can be initiated remotely. The exploit has been published and may be used.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 01:15:00 GMT

CVE-2025-9432 - Mtons MBlog Cross Site Scripting Vulnerability

CVE ID : CVE-2025-9432
Published : Aug. 26, 2025, 1:15 a.m. | 5 hours, 3 minutes ago
Description : A vulnerability has been found in mtons mblog up to 3.5.0. The affected element is an unknown function of the file /admin/post/list of the component Admin Panel. Such manipulation of the argument Title leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 01:15:00 GMT

CVE-2025-9429 - Mtons Mblog Cross Site Scripting Vulnerability

CVE ID : CVE-2025-9429
Published : Aug. 26, 2025, 12:15 a.m. | 6 hours, 3 minutes ago
Description : A security vulnerability has been detected in mtons mblog up to 3.5.0. This vulnerability affects unknown code of the file /post/submit of the component Post Handler. The manipulation of the argument content/title/ leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tue, 26 Aug 2025 00:15:00 GMT

CVE-2025-9424 - "Ruijie WS7204-A Remote File Inclusion Vulnerability"

CVE ID : CVE-2025-9424
Published : Aug. 25, 2025, 11:15 p.m. | 7 hours, 3 minutes ago
Description : A vulnerability was identified in Ruijie WS7204-A 2017.06.15. Affected by this vulnerability is an unknown functionality of the file /itbox_pi/branch_import.php?a=branch_list. Such manipulation of the argument province leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 5.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 23:15:00 GMT

CVE-2025-9425 - iSourcecode Online Tour and Travel Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9425
Published : Aug. 25, 2025, 11:15 p.m. | 7 hours, 3 minutes ago
Description : A security flaw has been discovered in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /enquiry.php. Performing manipulation of the argument pid results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 23:15:00 GMT

CVE-2025-9426 - iSourcecode Online Tour and Travel Management System SQL Injection

CVE ID : CVE-2025-9426
Published : Aug. 25, 2025, 11:15 p.m. | 7 hours, 3 minutes ago
Description : A weakness has been identified in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /package.php. Executing manipulation of the argument subcatid can lead to sql injection. The attack may be performed from a remote location. The exploit has been made available to the public and could be exploited.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 23:15:00 GMT

CVE-2025-9423 - Campcodes Online Water Billing System SQL Injection

CVE ID : CVE-2025-9423
Published : Aug. 25, 2025, 11:15 p.m. | 5 hours, 16 minutes ago
Description : A vulnerability was determined in Campcodes Online Water Billing System 1.0. Affected is an unknown function of the file /editecex.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 23:15:00 GMT

CVE-2025-9420 - iSourcecode Apartment Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9420
Published : Aug. 25, 2025, 10:15 p.m. | 6 hours, 16 minutes ago
Description : A flaw has been found in itsourcecode Apartment Management System 1.0. The impacted element is an unknown function of the file /floor/addfloor.php. Executing manipulation of the argument hdnid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 22:15:00 GMT

CVE-2025-9421 - iSourcecode Apartment Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9421
Published : Aug. 25, 2025, 10:15 p.m. | 6 hours, 16 minutes ago
Description : A vulnerability has been found in itsourcecode Apartment Management System 1.0. This affects an unknown function of the file /complain/addcomplain.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 22:15:00 GMT

CVE-2025-9422 - Samarium OITcode Team Image Handler Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-9422
Published : Aug. 25, 2025, 10:15 p.m. | 6 hours, 16 minutes ago
Description : A vulnerability was found in oitcode samarium up to 0.9.6. This impacts an unknown function of the file /dashboard/team of the component Team Image Handler. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used.
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 22:15:00 GMT

CVE-2025-57805 - Scratch Channel Unauthenticated Article Publishing Vulnerability

CVE ID : CVE-2025-57805
Published : Aug. 25, 2025, 10:15 p.m. | 6 hours, 5 minutes ago
Description : The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint used to publish articles, can be used to post an article in any category with any date, regardless of who's logged in. This issue has been patched in version 1.2.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 22:15:00 GMT

CVE-2025-57809 - XGrammar Infinite Recursion Vulnerability

CVE ID : CVE-2025-57809
Published : Aug. 25, 2025, 10:15 p.m. | 6 hours, 5 minutes ago
Description : XGrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.21, XGrammar has an infinite recursion issue in the grammar. This issue has been resolved in version 0.1.21.
Severity: 7.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 22:15:00 GMT

CVE-2025-57814 - Apache Request-Filtering-Agent SSRF Bypass

CVE ID : CVE-2025-57814
Published : Aug. 25, 2025, 10:15 p.m. | 6 hours, 5 minutes ago
Description : request-filtering-agent is an http(s).Agent implementation that blocks requests to Private/Reserved IP addresses. Versions 1.x.x and earlier contain a vulnerability where HTTPS requests to 127.0.0.1 bypass IP address filtering, while HTTP requests are correctly blocked. This allows attackers to potentially access internal HTTPS services running on localhost, bypassing the library's SSRF protection. The vulnerability is particularly dangerous when the application accepts user-controlled URLs and internal services are only protected by network-level restrictions. This vulnerability has been fixed in request-filtering-agent version 2.0.0. Users should upgrade to version 2.0.0 or later.
Severity: 5.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 22:15:00 GMT

CVE-2025-8627 - TP-Link KP303 Unauthenticated Remote Command Injection

CVE ID : CVE-2025-8627
Published : Aug. 25, 2025, 10:15 p.m. | 6 hours, 5 minutes ago
Description : The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak. This issue affects TP-Link KP303 (US) Smartplug: before 1.1.0.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 22:15:00 GMT

CVE-2025-9419 - iSourcecode Apartment Management System SQL Injection

CVE ID : CVE-2025-9419
Published : Aug. 25, 2025, 9:15 p.m. | 7 hours, 5 minutes ago
Description : A vulnerability was detected in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /unit/addunit.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 21:15:00 GMT

CVE-2025-57804 - Apache H2 HTTP/2 Request Smuggling Vulnerability

CVE ID : CVE-2025-57804
Published : Aug. 25, 2025, 9:15 p.m. | 5 hours, 4 minutes ago
Description : h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulnerability allows attackers to perform request smuggling attacks by injecting CRLF characters into headers. This occurs when servers downgrade HTTP/2 requests to HTTP/1.1 without properly validating header names/values, enabling attackers to manipulate request boundaries and bypass security controls. This issue has been patched in version 4.3.0.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 21:15:00 GMT

CVE-2025-6188 - Arista EOS UDP Port 3503 Remote Denial of Service and Authentication Bypass

CVE ID : CVE-2025-6188
Published : Aug. 25, 2025, 9:15 p.m. | 5 hours, 4 minutes ago
Description : On affected platforms running Arista EOS, maliciously formed UDP packets with source port 3503 may be accepted by EOS. UDP Port 3503 is associated with LspPing Echo Reply. This can result in unexpected behaviors, especially for UDP based services that do not perform some form of authentication.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 21:15:00 GMT

CVE-2025-9418 - itsourcecode Apartment Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9418
Published : Aug. 25, 2025, 9:15 p.m. | 5 hours, 4 minutes ago
Description : A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /owner/addowner.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 21:15:00 GMT

CVE-2025-3456 - Arista EOS Clear Text Encryption Key Disclosure

CVE ID : CVE-2025-3456
Published : Aug. 25, 2025, 8:15 p.m. | 6 hours, 4 minutes ago
Description : On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from the device running-config could then be used to obtain protocol specific passwords in cases where symmetric passwords are required between devices with neighbor protocol relationships.
Severity: 3.8 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 20:15:00 GMT

CVE-2025-52130 - WebErpMesv2 File Upload RCE

CVE ID : CVE-2025-52130
Published : Aug. 25, 2025, 8:15 p.m. | 6 hours, 4 minutes ago
Description : File upload vulnerability in WebErpMesv2 1.17 in the app/Http/Controllers/FactoryController.php controller. This flaw allows an authenticated attacker to upload arbitrary files, including PHP scripts, which can be accessed via direct GET requests, potentially resulting in remote code execution (RCE) on the web server.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 20:15:00 GMT

CVE-2025-9416 - "Oitcode Samarium Pages Image Handler Cross-Site Scripting Vulnerability"

CVE ID : CVE-2025-9416
Published : Aug. 25, 2025, 8:15 p.m. | 6 hours, 4 minutes ago
Description : A security flaw has been discovered in oitcode samarium up to 0.9.6. This vulnerability affects unknown code of the file /cms/webpage/ of the component Pages Image Handler. The manipulation results in cross site scripting. The attack may be performed from a remote location. The exploit has been released to the public and may be exploited.
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 20:15:00 GMT

CVE-2025-9417 - iSourcecode Apartment Management System SQL Injection Vulnerability

CVE ID : CVE-2025-9417
Published : Aug. 25, 2025, 8:15 p.m. | 6 hours, 4 minutes ago
Description : A weakness has been identified in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /employee/addemployee.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 20:15:00 GMT

CVE-2025-9414 - Kodbox Server-Download SSRF Vulnerability

CVE ID : CVE-2025-9414
Published : Aug. 25, 2025, 7:15 p.m. | 7 hours, 4 minutes ago
Description : A vulnerability was found in kalcaddle kodbox 1.61. Affected by this vulnerability is an unknown functionality of the file /?explorer/upload/serverDownload of the component Download from Link Handler. Performing manipulation of the argument url results in server-side request forgery. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 5.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 19:15:00 GMT

CVE-2025-9415 - GreenCMS Unrestricted File Upload Vulnerability

CVE ID : CVE-2025-9415
Published : Aug. 25, 2025, 7:15 p.m. | 7 hours, 4 minutes ago
Description : A vulnerability was identified in GreenCMS up to 2.3.0603. This affects an unknown part of the file /index.php?m=admin&c=media&a=fileconnect. The manipulation of the argument upload[] leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 19:15:00 GMT

CVE-2025-57802 - Airlink Docker Bind Mount Symlink Privilege Escalation Vulnerability

CVE ID : CVE-2025-57802
Published : Aug. 25, 2025, 6:15 p.m. | 6 hours, 2 minutes ago
Description : Airlink's Daemon interfaces with Docker and the Panel to provide secure access for controlling instances via the Panel. In version 1.0.0, an attacker with access to the affected container can create symbolic links inside the mounted directory (/app/data). Because the container bind-mounts an arbitrary host path, these symlinks can point to sensitive locations on the host filesystem. When the application or other processes follow these symlinks, the attacker can gain unauthorized read access to host files outside the container. This issue has been patched in version 1.0.1.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 18:15:00 GMT

CVE-2025-57811 - Craft Server-Side Template Injection Remote Code Execution Vulnerability

CVE ID : CVE-2025-57811
Published : Aug. 25, 2025, 6:15 p.m. | 6 hours, 2 minutes ago
Description : Craft is a platform for creating digital experiences. From versions 4.0.0-RC1 to 4.16.5 and 5.0.0-RC1 to 5.8.6, there is a potential remote code execution vulnerability via Twig SSTI (Server-Side Template Injection). This is a follow-up to CVE-2024-52293. This vulnerability has been patched in versions 4.16.6 and 5.8.7.
Severity: 6.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 18:15:00 GMT

CVE-2025-9412 - LostVip.com Ruoyi-Go Remote SQL Injection

CVE ID : CVE-2025-9412
Published : Aug. 25, 2025, 6:15 p.m. | 6 hours, 2 minutes ago
Description : A vulnerability was detected in lostvip-com ruoyi-go up to 2.1. This affects the function SelectListByPage of the file modules/system/dao/DictDataDao.go. The manipulation of the argument orderByColumn/isAsc results in sql injection. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 18:15:00 GMT

CVE-2025-9413 - LostVIP Ruoyi-Go SQL Injection Vulnerability

CVE ID : CVE-2025-9413
Published : Aug. 25, 2025, 6:15 p.m. | 6 hours, 2 minutes ago
Description : A flaw has been found in lostvip-com ruoyi-go up to 2.1. This impacts the function SelectListByPage of the file modules/system/system_router.go. This manipulation of the argument orderByColumn/isAsc causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 18:15:00 GMT

CVE-2025-50383 - Easy!Appointments SQL Injection

CVE ID : CVE-2025-50383
Published : Aug. 25, 2025, 6:15 p.m. | 4 hours, 6 minutes ago
Description : alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 18:15:00 GMT

CVE-2025-29420 - PerfreeBlog Directory Traversal Vulnerability

CVE ID : CVE-2025-29420
Published : Aug. 25, 2025, 5:15 p.m. | 5 hours, 6 minutes ago
Description : PerfreeBlog v4.0.11 has a directory traversal vulnerability in the getThemeFilesByName function.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 17:15:00 GMT

CVE-2025-29421 - PerfreeBlog Arbitrary File Read Vulnerability

CVE ID : CVE-2025-29421
Published : Aug. 25, 2025, 5:15 p.m. | 5 hours, 6 minutes ago
Description : PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 17:15:00 GMT

CVE-2025-50722 - Apache Sparkshop Unauthenticated Remote Code Execution

CVE ID : CVE-2025-50722
Published : Aug. 25, 2025, 5:15 p.m. | 5 hours, 6 minutes ago
Description : Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php component
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 17:15:00 GMT

CVE-2025-53120 - "Juniper Unified PAM Remote Code Execution via Path Traversal"

CVE ID : CVE-2025-53120
Published : Aug. 25, 2025, 5:15 p.m. | 5 hours, 6 minutes ago
Description : A path traversal vulnerability in unauthenticated upload functionality allows a malicious actor to upload binaries and scripts to the server’s configuration and web root directories, achieving remote code execution on the Unified PAM server.
Severity: 9.4 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 17:15:00 GMT

CVE-2025-57760 - Langflow Privilege Escalation Vulnerability

CVE ID : CVE-2025-57760
Published : Aug. 25, 2025, 5:15 p.m. | 5 hours, 6 minutes ago
Description : Langflow is a tool for building and deploying AI-powered agents and workflows. A privilege escalation vulnerability exists in Langflow containers where an authenticated user with RCE access can invoke the internal CLI command langflow superuser to create a new administrative user. This results in full superuser access, even if the user initially registered through the UI as a regular (non-admin) account. A patched version has not been made public at this time.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 17:15:00 GMT

CVE-2025-57772 - DataEase H2 JDBC RCE Bypass

CVE ID : CVE-2025-57772
Published : Aug. 25, 2025, 5:15 p.m. | 5 hours, 6 minutes ago
Description : DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.12, there is a H2 JDBC RCE bypass in DataEase. If the JDBC URL meets criteria, the getJdbcUrl method is returned, which acts as the getter for the JdbcUrl parameter provided. This bypasses H2's filtering logic and returns the H2 JDBC URL, allowing the "driver":"org.h2.Driver" to specify the H2 driver for the JDBC connection. The vulnerability has been fixed in version 2.10.12.
Severity: 8.2 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 17:15:00 GMT

CVE-2025-57773 - DataEase JNDI Injection Vulnerability

CVE ID : CVE-2025-57773
Published : Aug. 25, 2025, 5:15 p.m. | 5 hours, 6 minutes ago
Description : DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.12, because DB2 parameters are not filtered, a JNDI injection attack can be directly launched. JNDI triggers an AspectJWeaver deserialization attack, writing to various files. This vulnerability requires commons-collections 4.x and aspectjweaver-1.9.22.jar. The vulnerability has been fixed in version 2.10.12.
Severity: 8.2 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 17:15:00 GMT

CVE-2025-6737 - Securden Unified PAM Remote Vendor Gateway Authentication Bypass

CVE ID : CVE-2025-6737
Published : Aug. 25, 2025, 5:15 p.m. | 5 hours, 6 minutes ago
Description : Securden’s Unified PAM Remote Vendor Gateway access portal shares infrastructure and access tokens across multiple tenants. A malicious actor can obtain authentication material and access the gateway server with low-privilege permissions.
Severity: 7.2 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 17:15:00 GMT

CVE-2025-9410 - LostVIP Ruoyi-go SQL Injection Vulnerability

CVE ID : CVE-2025-9410
Published : Aug. 25, 2025, 5:15 p.m. | 5 hours, 6 minutes ago
Description : A weakness has been identified in lostvip-com ruoyi-go up to 2.1. The affected element is the function SelectListByPage of the file modules/system/dao/GenTableDao.go. Executing manipulation of the argument isAsc/orderByColumn can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 17:15:00 GMT

CVE-2025-9411 - "LostVIP.com Ruoyi-go SQL Injection Vulnerability"

CVE ID : CVE-2025-9411
Published : Aug. 25, 2025, 5:15 p.m. | 5 hours, 6 minutes ago
Description : A security vulnerability has been detected in lostvip-com ruoyi-go up to 2.1. The impacted element is the function SelectPageList of the file modules/system/service/LoginInforService.go. The manipulation of the argument isAsc leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 17:15:00 GMT

CVE-2025-46411 - The Biosig Project libbiosig Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-46411
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-48005 - Biosig Project libbiosig Heap-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-48005
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A heap-based buffer overflow vulnerability exists in the RHS2000 parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted RHS2000 file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-52461 - Biosig Project Libbiosig Nex Parsing Out-of-Bounds Read Information Leak

CVE ID : CVE-2025-52461
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : An out-of-bounds read vulnerability exists in the Nex parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted .nex file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.
Severity: 8.2 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-52581 - The Biosig Project libbiosig Arbitrary Code Execution Vulnerability

CVE ID : CVE-2025-52581
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : An integer overflow vulnerability exists in the GDF parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted GDF file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-53511 - The Biosig Project libbiosig Heap-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-53511
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A heap-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-53518 - The Biosig Project libbiosig Arbitrary Code Execution Vulnerability

CVE ID : CVE-2025-53518
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : An integer overflow vulnerability exists in the ABF parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted ABF file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-53557 - Biosig Project Libbiosig MFER Parsing Heap-Based Buffer Overflow

CVE ID : CVE-2025-53557
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A heap-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-53853 - Biosig Project libbiosig Heap-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-53853
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A heap-based buffer overflow vulnerability exists in the ISHNE parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted ISHNE ECG annotations file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-54370 - PhpOffice/PhpSpreadsheet SSRF Vulnerability

CVE ID : CVE-2025-54370
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : PhpOffice/PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to versions 1.30.0, 2.1.12, 2.4.0, 3.10.0, and 5.0.0, SSRF can occur when a processed HTML document is read and displayed in the browser. The vulnerability lies in the setPath method of the PhpOffice\PhpSpreadsheet\Worksheet\Drawing class, where a crafted string from the user is passed to the HTML reader. This issue has been patched in versions 1.30.0, 2.1.12, 2.4.0, 3.10.0, and 5.0.0.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-54462 - Biosig Project libbiosig Heap-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-54462
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A heap-based buffer overflow vulnerability exists in the Nex parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted .nex file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-54480 - The Biosig Project libbiosig Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-54480
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 8719 of biosig.c on the current master branch (35a819fa), when the Tag is 0: if (tag==0) { if (len!=1) fprintf(stderr,"Warning MFER tag0 incorrect length %i!=1\n",len); curPos += ifread(buf,1,len,hdr); }
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-54481 - Biosig Project libbiosig Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-54481
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 8744 of biosig.c on the current master branch (35a819fa), when the Tag is 3: else if (tag==3) { // character code char v[17]; // [1] if (len>16) fprintf(stderr,"Warning MFER tag2 incorrect length %i>16\n",len); curPos += ifread(&v,1,len,hdr); v[len] = 0; In this case, the overflowed buffer is the newly-declared `v` \[1\] instead of `buf`. Since `v` is only 17 bytes large, much smaller values of `len` (even those encoded using a single octet) can trigger an overflow in this code path.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-54482 - The Biosig Project libbiosig Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-54482
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 8751 of biosig.c on the current master branch (35a819fa), when the Tag is 4: else if (tag==4) { // SPR if (len>4) fprintf(stderr,"Warning MFER tag4 incorrect length %i>4\n",len); curPos += ifread(buf,1,len,hdr);
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-54483 - The Biosig Project libbiosig Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-54483
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 8759 of biosig.c on the current master branch (35a819fa), when the Tag is 5: else if (tag==5) //0x05: number of channels { uint16_t oldNS=hdr->NS; if (len>4) fprintf(stderr,"Warning MFER tag5 incorrect length %i>4\n",len); curPos += ifread(buf,1,len,hdr);
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-54484 - Biosig Project libbiosig MFER Parsing Stack Buffer Overflow

CVE ID : CVE-2025-54484
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 8779 of biosig.c on the current master branch (35a819fa), when the Tag is 6: else if (tag==6) // 0x06 "number of sequences" { // NRec if (len>4) fprintf(stderr,"Warning MFER tag6 incorrect length %i>4\n",len); curPos += ifread(buf,1,len,hdr);
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-54485 - Biosig Project libbiosig Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-54485
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 8785 of biosig.c on the current master branch (35a819fa), when the Tag is 8: else if (tag==8) { if (len>2) fprintf(stderr,"Warning MFER tag8 incorrect length %i>2\n",len); curPos += ifread(buf,1,len,hdr);
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-54486 - The Biosig Project libbiosig Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-54486
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 8824 of biosig.c on the current master branch (35a819fa), when the Tag is 11: else if (tag==11) //0x0B { // Fs if (len>6) fprintf(stderr,"Warning MFER tag11 incorrect length %i>6\n",len); double fval; curPos += ifread(buf,1,len,hdr);
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-54487 - The Biosig Project libbiosig MFER Parsing Stack Buffer Overflow

CVE ID : CVE-2025-54487
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 8842 of biosig.c on the current master branch (35a819fa), when the Tag is 12: else if (tag==12) //0x0C { // sampling resolution if (len>6) fprintf(stderr,"Warning MFER tag12 incorrect length %i>6\n",len); val32 = 0; int8_t v8; curPos += ifread(&UnitCode,1,1,hdr); curPos += ifread(&v8,1,1,hdr); curPos += ifread(buf,1,len-2,hdr); In addition to values of `len` greater than 130 triggering a buffer overflow, a value of `len` smaller than 2 will also trigger a buffer overflow due to an integer underflow when computing `len-2` in this code path.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-54488 - "The Biosig Project libbiosig Stack-Based Buffer Overflow"

CVE ID : CVE-2025-54488
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 8850 of biosig.c on the current master branch (35a819fa), when the Tag is 13: else if (tag==13) { if (len>8) fprintf(stderr,"Warning MFER tag13 incorrect length %i>8\n",len); curPos += ifread(&buf,1,len,hdr);
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-54489 - The Biosig Project libbiosig MFER Parsing Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-54489
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 8970 of biosig.c on the current master branch (35a819fa), when the Tag is 63: else if (tag==63) { uint8_t tag2=255, len2=255; count = 0; while ((count Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-54490 - The Biosig Project libbiosig Stack-Based Buffer Overflow

CVE ID : CVE-2025-54490
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 9090 of biosig.c on the current master branch (35a819fa), when the Tag is 64: else if (tag==64) //0x40 { // preamble char tmp[256]; // [1] curPos += ifread(tmp,1,len,hdr); In this case, the overflowed buffer is the newly-declared `tmp` \[1\] instead of `buf`. While `tmp` is larger than `buf`, having a size of 256 bytes, a stack overflow can still occur in cases where `len` is encoded using multiple octets and is greater than 256.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-54491 - The Biosig Project libbiosig Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-54491
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 9191 of biosig.c on the current master branch (35a819fa), when the Tag is 65: else if (tag==65) //0x41: patient event { // event table curPos += ifread(buf,1,len,hdr);
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-54492 - Biosig Project libbiosig Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-54492
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 9141 of biosig.c on the current master branch (35a819fa), when the Tag is 67: else if (tag==67) //0x43: Sample skew { int skew=0; // [1] curPos += ifread(&skew, 1, len,hdr); In this case, the address of the newly-defined integer `skew` \[1\] is overflowed instead of `buf`. This means a stack overflow can occur using much smaller values of `len` in this code path.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-54493 - Biosig Project libbiosig Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-54493
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 9184 of biosig.c on the current master branch (35a819fa), when the Tag is 131: else if (tag==131) //0x83 { // Patient Age if (len!=7) fprintf(stderr,"Warning MFER tag131 incorrect length %i!=7\n",len); curPos += ifread(buf,1,len,hdr);
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-54494 - Biosig Project libbiosig MFER Parsing Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-54494
Published : Aug. 25, 2025, 2:15 p.m. | 7 hours, 30 minutes ago
Description : A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 9205 of biosig.c on the current master branch (35a819fa), when the Tag is 133: else if (tag==133) //0x85 { curPos += ifread(buf,1,len,hdr);
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 14:15:00 GMT

CVE-2025-9407 - Mtons MBlog Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-9407
Published : Aug. 25, 2025, 11:15 a.m. | 3 hours, 6 minutes ago
Description : A flaw has been found in mtons mblog up to 3.5.0. Affected by this vulnerability is an unknown functionality of the file /settings/profile. Executing manipulation of the argument signature can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used. Other parameters might be affected as well.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 11:15:00 GMT

CVE-2025-48303 - Kevin Langley Jr. Post Type Converter CSRF Vulnerability

CVE ID : CVE-2025-48303
Published : Aug. 25, 2025, 10:15 a.m. | 4 hours, 6 minutes ago
Description : Cross-Site Request Forgery (CSRF) vulnerability in Kevin Langley Jr. Post Type Converter allows Cross-Site Request Forgery.This issue affects Post Type Converter: from n/a through 0.6.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 10:15:00 GMT

CVE-2025-8562 - WordPress Custom Query Shortcode Path Traversal

CVE ID : CVE-2025-8562
Published : Aug. 25, 2025, 10:15 a.m. | 4 hours, 6 minutes ago
Description : The Custom Query Shortcode plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 0.4.0 via the 'lens' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of files on the server, which can contain sensitive information.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 10:15:00 GMT

CVE-2025-7426 - Mnova TTA FTP Debug Port Authentication Bypass Information Disclosure

CVE ID : CVE-2025-7426
Published : Aug. 25, 2025, 9:15 a.m. | 5 hours, 6 minutes ago
Description : Information disclosure and exposure of authentication FTP credentials over the debug port 1604 in the MINOVA TTA service. This allows unauthenticated remote access to an active FTP account containing sensitive internal data and import structures. In environments where this FTP server is part of automated business processes (e.g. EDI or data integration), this could lead to data manipulation, extraction, or abuse.  Debug ports 1602, 1603 and 1636 also expose service architecture information and system activity logs
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 09:15:00 GMT

CVE-2025-5191 - Moxa SerialInterfaceService Unquoted Search Path Privilege Escalation

CVE ID : CVE-2025-5191
Published : Aug. 25, 2025, 8:15 a.m. | 6 hours, 6 minutes ago
Description : An Unquoted Search Path vulnerability has been identified in the utility for Moxa’s industrial computers (Windows). Due to the unquoted path configuration in the SerialInterfaceService.exe utility, a local attacker with limited privileges could place a malicious executable in a higher-priority directory within the search path. When the Serial Interface service starts, the malicious executable could be run with SYSTEM privileges. Successful exploitation could allow privilege escalation or enable an attacker to maintain persistence on the affected system. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality, integrity, or availability within any subsequent systems.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 08:15:00 GMT

CVE-2025-54300 - "Joomla Quantum Manager SVG Upload Stored XSS"

CVE ID : CVE-2025-54300
Published : Aug. 25, 2025, 7:15 a.m. | 7 hours, 6 minutes ago
Description : A stored XSS vulnerability in Quantum Manager component 1.0.0-3.2.0 for Joomla was discovered. The SVG upload feature does not sanitize uploads.
Severity: 8.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 07:15:00 GMT

CVE-2025-54301 - "Quantum Manager Joomla Stored XSS"

CVE ID : CVE-2025-54301
Published : Aug. 25, 2025, 7:15 a.m. | 7 hours, 6 minutes ago
Description : A stored XSS vulnerability in Quantum Manager component 1.0.0-3.2.0 for Joomla was discovered. File names are not properly escaped.
Severity: 8.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 07:15:00 GMT

CVE-2025-8997 - OpenText Enterprise Security Manager Information Exposure Vulnerability

CVE ID : CVE-2025-8997
Published : Aug. 25, 2025, 7:15 a.m. | 7 hours, 6 minutes ago
Description : An Information Exposure vulnerability has been identified in OpenText Enterprise Security Manager. The vulnerability could be remotely exploited.
Severity: 5.7 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 07:15:00 GMT

CVE-2025-9118 - Google Cloud Dataform Path Traversal Vulnerability

CVE ID : CVE-2025-9118
Published : Aug. 25, 2025, 7:15 a.m. | 7 hours, 6 minutes ago
Description : A path traversal vulnerability in the NPM package installation process of Google Cloud Dataform allows a remote attacker to read and write files in other customers' repositories via a maliciously crafted package.json file.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 07:15:00 GMT

CVE-2025-5514 - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU Module HTTP Request Delay Denial of Service Vulnerability

CVE ID : CVE-2025-5514
Published : Aug. 25, 2025, 6:15 a.m. | 8 hours, 6 minutes ago
Description : Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web server function, by sending a specially crafted HTTP request.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 06:15:00 GMT

CVE-2025-9405 - Open5GS Remote Assertion Vulnerability

CVE ID : CVE-2025-9405
Published : Aug. 25, 2025, 4:15 a.m. | 10 hours, 6 minutes ago
Description : A security flaw has been discovered in Open5GS up to 2.7.5. The impacted element is the function gmm_state_exception of the file src/amf/gmm-sm.c. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited. The patch is identified as 8e5fed16114f2f5e40bee1b161914b592b2b7b8f. Applying a patch is advised to resolve this issue.
Severity: 5.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 04:15:00 GMT

CVE-2025-9406 - Apache Mossle CMS Unrestricted File Upload Vulnerability

CVE ID : CVE-2025-9406
Published : Aug. 25, 2025, 4:15 a.m. | 10 hours, 5 minutes ago
Description : A weakness has been identified in xuhuisheng lemon up to 1.13.0. This affects the function uploadImage of the file CmsArticleController.java of the component com.mossle.cms.web.CmsArticleController.uploadImage. This manipulation of the argument Upload causes unrestricted upload. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 04:15:00 GMT

CVE-2025-9403 - "jqlang jq JSON Parser Local Assertion Vulnerability"

CVE ID : CVE-2025-9403
Published : Aug. 25, 2025, 3:15 a.m. | 11 hours, 6 minutes ago
Description : A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file jq_test.c of the component JSON Parser. Executing manipulation can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Other versions might be affected as well.
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 03:15:00 GMT

CVE-2025-9404 - Scada-LTS Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-9404
Published : Aug. 25, 2025, 3:15 a.m. | 11 hours, 6 minutes ago
Description : A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of the component Folder Handler. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 03:15:00 GMT

CVE-2025-9402 - HuangDou UTCMS Server-Side Request Forgery (SSRF) in Config Handler

CVE ID : CVE-2025-9402
Published : Aug. 25, 2025, 2:15 a.m. | 12 hours, 6 minutes ago
Description : A vulnerability was found in HuangDou UTCMS 9. This issue affects some unknown processing of the file app/modules/ut-frame/admin/update.php of the component Config Handler. Performing manipulation of the argument UPDATEURL results in server-side request forgery. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 5.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 02:15:00 GMT

CVE-2025-9399 - YiFang CMS SQL Injection Vulnerability

CVE ID : CVE-2025-9399
Published : Aug. 25, 2025, 1:15 a.m. | 13 hours, 6 minutes ago
Description : A vulnerability was detected in YiFang CMS up to 2.0.5. Affected by this issue is some unknown functionality of the file app/logic/L_tool.php. The manipulation of the argument new_url results in sql injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 01:15:00 GMT

CVE-2025-9400 - YiFang CMS Unrestricted File Upload Vulnerability

CVE ID : CVE-2025-9400
Published : Aug. 25, 2025, 1:15 a.m. | 13 hours, 6 minutes ago
Description : A flaw has been found in YiFang CMS up to 2.0.5. This affects the function mergeMultipartUpload of the file app/utils/base/plugin/P_file.php. This manipulation of the argument File causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 01:15:00 GMT

CVE-2025-9401 - HuangDou UTCMS Remote Code Execution Vulnerability

CVE ID : CVE-2025-9401
Published : Aug. 25, 2025, 1:15 a.m. | 13 hours, 6 minutes ago
Description : A vulnerability has been found in HuangDou UTCMS 9. This vulnerability affects unknown code of the file app/modules/ut-frame/admin/login.php of the component Login. Such manipulation of the argument code leads to incorrect comparison. The attack can be executed remotely. The attack requires a high level of complexity. It is stated that the exploitability is difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 01:15:00 GMT

CVE-2025-9398 - YiFang CMS Migrate.php Information Disclosure

CVE ID : CVE-2025-9398
Published : Aug. 25, 2025, 12:15 a.m. | 14 hours, 6 minutes ago
Description : A security vulnerability has been detected in YiFang CMS up to 2.0.5. Affected by this vulnerability is the function exportInstallTable of the file app/utils/base/database/Migrate.php. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 5.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Mon, 25 Aug 2025 00:15:00 GMT

CVE-2025-9396 - lrzip Null Pointer Dereference Vulnerability

CVE ID : CVE-2025-9396
Published : Aug. 24, 2025, 11:15 p.m. | 15 hours, 6 minutes ago
Description : A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function __GI_____strtol_l_internal of the file strtol_l.c. Performing manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be exploited.
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 23:15:00 GMT

CVE-2025-9397 - Givanz Vvveb Unrestricted File Upload Vulnerability

CVE ID : CVE-2025-9397
Published : Aug. 24, 2025, 11:15 p.m. | 15 hours, 6 minutes ago
Description : A weakness has been identified in givanz Vvveb up to 1.0.7.2. Affected is an unknown function of the file /system/traits/media.php. Executing manipulation of the argument files[] can lead to unrestricted upload. The attack can be launched remotely. The exploit has been made available to the public and could be exploited. Applying a patch is advised to resolve this issue. The code maintainer explains, that "[he] fixed the code to remove this vulnerability and will make a new release".
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 23:15:00 GMT

CVE-2025-9395 - Wangsongyan Wblog SRFO (Server-Side Request Forgery)

CVE ID : CVE-2025-9395
Published : Aug. 24, 2025, 10:15 p.m. | 16 hours, 6 minutes ago
Description : A vulnerability was identified in wangsongyan wblog 0.0.1. This affects the function RestorePost of the file backup.go. Such manipulation of the argument fileName leads to server-side request forgery. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 22:15:00 GMT

CVE-2025-9393 - "Linksys RE Series Stack-Based Buffer Overflow Vulnerability"

CVE ID : CVE-2025-9393
Published : Aug. 24, 2025, 4:15 p.m. | 22 hours, 6 minutes ago
Description : A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This vulnerability affects the function addStaProfile of the file /goform/addStaProfile. Performing manipulation of the argument profile_name/Ssid/wep_key_1/wep_key_2/wep_key_3/wep_key_4/wep_key_length/wep_default_key/cipher/passphrase results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 9.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 16:15:00 GMT

CVE-2025-9394 - PoDoFo PDF Dictionary Parser Use After Free Vulnerability

CVE ID : CVE-2025-9394
Published : Aug. 24, 2025, 4:15 p.m. | 22 hours, 6 minutes ago
Description : A flaw has been found in PoDoFo 1.1.0-dev. This issue affects the function PdfTokenizer::DetermineDataType of the file src/podofo/main/PdfTokenizer.cpp of the component PDF Dictionary Parser. Executing manipulation can lead to use after free. It is possible to launch the attack on the local host. The exploit has been published and may be used. This patch is called 22d16cb142f293bf956f66a4d399cdd65576d36c. A patch should be applied to remediate this issue.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 16:15:00 GMT

CVE-2025-9392 - Linksys Wireless Router Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-9392
Published : Aug. 24, 2025, 3:15 p.m. | 23 hours, 6 minutes ago
Description : A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function qosClassifier of the file /goform/qosClassifier. Such manipulation of the argument dir/sFromPort/sToPort/dFromPort/dToPort/protocol/layer7/dscp/remark_dscp leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 9.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 15:15:00 GMT

CVE-2025-9391 - Bjskzy Zhiyou ERP SQL Injection

CVE ID : CVE-2025-9391
Published : Aug. 24, 2025, 3:15 p.m. | 20 hours, 31 minutes ago
Description : A weakness has been identified in Bjskzy Zhiyou ERP up to 11.0. Affected by this issue is the function getFieldValue of the component com.artery.workflow.ServiceImpl. This manipulation of the argument sql causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 15:15:00 GMT

CVE-2025-9390 - Vim xxd Buffer Overflow Vulnerability

CVE ID : CVE-2025-9390
Published : Aug. 24, 2025, 2:15 p.m. | 21 hours, 8 minutes ago
Description : A security flaw has been discovered in vim up to 9.1.1615. Affected by this vulnerability is the function main of the file src/xxd/xxd.c of the component xxd. The manipulation results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be exploited. Upgrading to version 9.1.1616 addresses this issue. The patch is identified as eeef7c77436a78cd27047b0f5fa6925d56de3cb0. It is recommended to upgrade the affected component.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 14:15:00 GMT

CVE-2025-9388 - Scada-LTS Cross-Site Scripting

CVE ID : CVE-2025-9388
Published : Aug. 24, 2025, 1:15 p.m. | 20 hours, 12 minutes ago
Description : A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function of the file watch_list.shtm. Executing manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 13:15:00 GMT

CVE-2025-9389 - Vim Local Memory Corruption Vulnerability

CVE ID : CVE-2025-9389
Published : Aug. 24, 2025, 1:15 p.m. | 20 hours, 12 minutes ago
Description : A vulnerability was identified in vim 9.1.0000. Affected is the function __memmove_avx_unaligned_erms of the file memmove-vec-unaligned-erms.S. The manipulation leads to memory corruption. The attack needs to be performed locally. The exploit is publicly available and might be used. Some users are not able to reproduce this. One of the users mentions that this appears not to be working, "when coloring is turned on".
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 13:15:00 GMT

CVE-2025-9387 - DCN DCME-720 Web Management Backend OS Command Injection

CVE ID : CVE-2025-9387
Published : Aug. 24, 2025, 12:15 p.m. | 19 hours, 11 minutes ago
Description : A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ip_block.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. Other products might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 12:15:00 GMT

CVE-2025-9385 - Appneta TCPreplay Use After Free Vulnerability

CVE ID : CVE-2025-9385
Published : Aug. 24, 2025, 11:15 a.m. | 20 hours, 11 minutes ago
Description : A flaw has been found in appneta tcpreplay up to 4.5.1. The affected element is the function fix_ipv6_checksums of the file edit_packet.c of the component tcprewrite. This manipulation causes use after free. The attack is restricted to local execution. The exploit has been published and may be used. Upgrading to version 4.5.2-beta3 is sufficient to fix this issue. It is advisable to upgrade the affected component.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 11:15:00 GMT

CVE-2025-9386 - AppNeta Tcpreplay Use After Free Vulnerability

CVE ID : CVE-2025-9386
Published : Aug. 24, 2025, 11:15 a.m. | 20 hours, 11 minutes ago
Description : A vulnerability has been found in appneta tcpreplay up to 4.5.1. The impacted element is the function get_l2len_protocol of the file get.c of the component tcprewrite. Such manipulation leads to use after free. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Upgrading to version 4.5.2-beta3 is sufficient to resolve this issue. You should upgrade the affected component.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 11:15:00 GMT

CVE-2025-9383 - FNKvision Y215 CCTV Camera Weak Hash Local Privilege Escalation Vulnerability

CVE ID : CVE-2025-9383
Published : Aug. 24, 2025, 10:15 a.m. | 21 hours, 11 minutes ago
Description : A security vulnerability has been detected in FNKvision Y215 CCTV Camera 10.194.120.40. This issue affects the function crypt of the file /etc/passwd. The manipulation leads to use of weak hash. The attack can only be performed from a local environment. The complexity of an attack is rather high. The exploitability is assessed as difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 2.5 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 10:15:00 GMT

CVE-2025-9384 - Appneta TCPreplay Local Null Pointer Dereference Vulnerability

CVE ID : CVE-2025-9384
Published : Aug. 24, 2025, 10:15 a.m. | 21 hours, 11 minutes ago
Description : A vulnerability was detected in appneta tcpreplay up to 4.5.1. Impacted is the function tcpedit_post_args of the file /src/tcpedit/parse_args.c. The manipulation results in null pointer dereference. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 4.5.2-beta2 is recommended to address this issue. Upgrading the affected component is advised. The vendor explains, that he was "[a]ble to reproduce in 6fcbf03 but not in 4.5.2-beta2".
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 10:15:00 GMT

CVE-2025-9382 - FNKvision Y215 CCTV Camera Telnet Service Backdoor Vulnerability

CVE ID : CVE-2025-9382
Published : Aug. 24, 2025, 8:15 a.m. | 21 hours, 8 minutes ago
Description : A weakness has been identified in FNKvision Y215 CCTV Camera 10.194.120.40. This vulnerability affects unknown code of the file s1_rf_test_config of the component Telnet Sevice. Executing manipulation can lead to backdoor. The physical device can be targeted for the attack. This attack is characterized by high complexity. It is stated that the exploitability is difficult. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 08:15:00 GMT

CVE-2025-9381 - FNKvision Y215 CCTV Camera File Disclosure Vulnerability

CVE ID : CVE-2025-9381
Published : Aug. 24, 2025, 8:15 a.m. | 19 hours, 11 minutes ago
Description : A security flaw has been discovered in FNKvision Y215 CCTV Camera 10.194.120.40. This affects an unknown part of the file /tmp/wpa_supplicant.conf. Performing manipulation results in information disclosure. The attack may be carried out on the physical device. The attack's complexity is rated as high. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 1.6 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 08:15:00 GMT

CVE-2025-9379 - "Belkin AX1800 Firmware Update Handler Remote Authentication Bypass"

CVE ID : CVE-2025-9379
Published : Aug. 24, 2025, 7:15 a.m. | 20 hours, 10 minutes ago
Description : A vulnerability was determined in Belkin AX1800 1.1.00.016. Affected by this vulnerability is an unknown functionality of the component Firmware Update Handler. This manipulation causes insufficient verification of data authenticity. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 8.6 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 07:15:00 GMT

CVE-2025-9380 - FNKvision Y215 CCTV Camera Firmware Hard-coded Credentials Vulnerability

CVE ID : CVE-2025-9380
Published : Aug. 24, 2025, 7:15 a.m. | 20 hours, 10 minutes ago
Description : A vulnerability was identified in FNKvision Y215 CCTV Camera 10.194.120.40. Affected by this issue is some unknown functionality of the file /etc/passwd of the component Firmware. Such manipulation leads to hard-coded credentials. Local access is required to approach this attack. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 8.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 07:15:00 GMT

CVE-2025-8208 - Spexo Addons for Elementor WordPress Stored Cross-Site Scripting

CVE ID : CVE-2025-8208
Published : Aug. 24, 2025, 6:15 a.m. | 21 hours, 10 minutes ago
Description : The Spexo Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and including, 1.0.23 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Severity: 6.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 06:15:00 GMT

CVE-2025-36157 - IBM Jazz Foundation Unauthorized File Update Vulnerability

CVE ID : CVE-2025-36157
Published : Aug. 24, 2025, 2:15 a.m. | 22 hours, 42 minutes ago
Description : IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an unauthenticated remote attacker to update server property files that would allow them to perform unauthorized actions.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 02:15:00 GMT

CVE-2025-36174 - IBM Integrated Analytics System File Upload Arbitrary Code Execution Vulnerability

CVE ID : CVE-2025-36174
Published : Aug. 24, 2025, 2:15 a.m. | 22 hours, 42 minutes ago
Description : IBM Integrated Analytics System 1.0.0.0 through 1.0.30.0 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened.
Severity: 8.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sun, 24 Aug 2025 02:15:00 GMT

CVE-2025-9362 - Linksys Router Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-9362
Published : Aug. 23, 2025, 2:15 p.m. | 1 day, 10 hours ago
Description : A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The impacted element is the function urlFilterManageRule of the file /goform/urlFilterManageRule. Executing manipulation of the argument urlFilterRuleName/scheduleUrl/addURLFilter can lead to stack-based buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 14:15:00 GMT

CVE-2025-9363 - Linksys Wi-Fi Router Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-9363
Published : Aug. 23, 2025, 2:15 p.m. | 1 day, 10 hours ago
Description : A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function portTriggerManageRule of the file /goform/portTriggerManageRule. The manipulation of the argument triggerRuleName/schedule leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 9.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 14:15:00 GMT

CVE-2025-9361 - Linksys RE Series Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-9361
Published : Aug. 23, 2025, 12:15 p.m. | 1 day, 11 hours ago
Description : A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The affected element is the function ipRangeBlockManageRule of the file /goform/ipRangeBlockManageRule. Performing manipulation of the argument ipRangeBlockRuleName/scheduleIp/ipRangeBlockRuleIpAddr results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 9.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 12:15:00 GMT

CVE-2025-9360 - Linksys RE Series Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-9360
Published : Aug. 23, 2025, 11:15 a.m. | 1 day, 12 hours ago
Description : A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Impacted is the function accessControlAdd of the file /goform/accessControlAdd. Such manipulation of the argument ruleName/schedule leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 9.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 11:15:00 GMT

CVE-2025-9359 - Linksys Wireless Router Stack-Based Buffer Overflow

CVE ID : CVE-2025-9359
Published : Aug. 23, 2025, 10:15 a.m. | 1 day, 13 hours ago
Description : A weakness has been identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function RP_checkCredentialsByBBS of the file /goform/RP_checkCredentialsByBBS. This manipulation of the argument ssidhex/pwd causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 9.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 10:15:00 GMT

CVE-2025-9358 - Linksys RE Series Stack-Based Buffer Overflow

CVE ID : CVE-2025-9358
Published : Aug. 23, 2025, 8:15 a.m. | 1 day, 13 hours ago
Description : A security flaw has been discovered in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This vulnerability affects the function setSysAdm of the file /goform/setSysAdm. The manipulation of the argument admpasshint results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 9.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 08:15:00 GMT

CVE-2025-5060 - Bravis User WordPress Authentication Bypass Vulnerability

CVE ID : CVE-2025-5060
Published : Aug. 23, 2025, 7:15 a.m. | 1 day, 8 hours ago
Description : The Bravis User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.0. This is due to the plugin not properly logging a user in with the data that was previously verified through the facebook_ajax_login_callback(). This makes it possible for unauthenticated attackers to log in as administrative users, as long as they have an existing account on the site, and access to the administrative user's email.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 07:15:00 GMT

CVE-2025-5352 - "Lunary Analytics NEXT_PUBLIC_CUSTOM_SCRIPT Stored XSS Vulnerability"

CVE ID : CVE-2025-5352
Published : Aug. 23, 2025, 7:15 a.m. | 1 day, 8 hours ago
Description : A critical stored Cross-Site Scripting (XSS) vulnerability exists in the Analytics component of lunary-ai/lunary versions up to 1.9.23, where the NEXT_PUBLIC_CUSTOM_SCRIPT environment variable is directly injected into the DOM using dangerouslySetInnerHTML without any sanitization or validation. This allows arbitrary JavaScript execution in all users' browsers if an attacker can control the environment variable during deployment or through server compromise. The vulnerability can lead to complete account takeover, data exfiltration, malware distribution, and persistent attacks affecting all users until the environment variable is cleaned. The issue is fixed in version 1.9.25.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 07:15:00 GMT

CVE-2025-5821 - "WordPress Case Theme User Plugin Authentication Bypass"

CVE ID : CVE-2025-5821
Published : Aug. 23, 2025, 7:15 a.m. | 1 day, 8 hours ago
Description : The Case Theme User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly logging a user in with the data that was previously verified through the facebook_ajax_login_callback(). This makes it possible for unauthenticated attackers to log in as administrative users, as long as they have an existing account on the site, and access to the administrative user's email.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 07:15:00 GMT

CVE-2025-9357 - "Linksys Wi-Fi Router Stack-Based Buffer Overflow Vulnerability"

CVE ID : CVE-2025-9357
Published : Aug. 23, 2025, 6:15 a.m. | 1 day, 9 hours ago
Description : A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function langSwitchByBBS of the file /goform/langSwitchByBBS. The manipulation of the argument langSelectionOnly leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 9.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 06:15:00 GMT

CVE-2025-7813 - "Eventin WordPress Plugin SSRF Vulnerability"

CVE ID : CVE-2025-7813
Published : Aug. 23, 2025, 6:15 a.m. | 1 day, 7 hours ago
Description : The Events Calendar, Event Booking, Registrations and Event Tickets – Eventin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.37 via the proxy_image function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
Severity: 7.2 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 06:15:00 GMT

CVE-2025-9048 - WordPress Wptobe-memberships Plugin File Deletion Vulnerability

CVE ID : CVE-2025-9048
Published : Aug. 23, 2025, 5:15 a.m. | 1 day, 8 hours ago
Description : The Wptobe-memberships plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the del_img_ajax_call() function in all versions up to, and including, 3.4.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 05:15:00 GMT

CVE-2025-9131 - Ogulo – 360° Tour WordPress Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-9131
Published : Aug. 23, 2025, 5:15 a.m. | 1 day, 8 hours ago
Description : The Ogulo – 360° Tour plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slug’ parameter in all versions up to, and including, 1.0.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Severity: 6.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 05:15:00 GMT

CVE-2025-7842 - Silencesoft RSS Reader Plugin CSRF Vulnerability

CVE ID : CVE-2025-7842
Published : Aug. 23, 2025, 5:15 a.m. | 1 day, 6 hours ago
Description : The Silencesoft RSS Reader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.6. This is due to missing or incorrect nonce validation on the 'sil_rss_edit_page' page. This makes it possible for unauthenticated attackers to delete RSS feeds via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 05:15:00 GMT

CVE-2025-7957 - WordPress ShortcodeHub Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-7957
Published : Aug. 23, 2025, 5:15 a.m. | 1 day, 6 hours ago
Description : The ShortcodeHub plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘author_link_target’ parameter in all versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Severity: 6.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 05:15:00 GMT

CVE-2025-8062 - WordPress WS Theme Addons Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-8062
Published : Aug. 23, 2025, 5:15 a.m. | 1 day, 6 hours ago
Description : The WS Theme Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ws_weather shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Severity: 6.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 05:15:00 GMT

CVE-2025-7839 - WordPress Restore Permanently Delete Post or Page Data CSRF

CVE ID : CVE-2025-7839
Published : Aug. 23, 2025, 5:15 a.m. | 1 day, 4 hours ago
Description : The Restore Permanently delete Post or Page Data plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the rp_dpo_dpa_ajax_dp_delete_data() function. This makes it possible for unauthenticated attackers to delete data via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 05:15:00 GMT

CVE-2025-7841 - Sertifier Certificate Badge Maker for WordPress - Tutor LMS Cross-Site Request Forgery (CSRF)

CVE ID : CVE-2025-7841
Published : Aug. 23, 2025, 5:15 a.m. | 1 day, 4 hours ago
Description : The Sertifier Certificate & Badge Maker for WordPress – Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.19. This is due to missing or incorrect nonce validation on the 'sertifier_settings' page. This makes it possible for unauthenticated attackers to update the plugin's api key via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 05:15:00 GMT

CVE-2025-7827 - Ni WooCommerce Customer Product Report Unauthorized Data Modification

CVE ID : CVE-2025-7827
Published : Aug. 23, 2025, 5:15 a.m. | 1 day, 2 hours ago
Description : The Ni WooCommerce Customer Product Report plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ni_woocpr_action() function in all versions up to, and including, 1.2.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update plugin settings.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 05:15:00 GMT

CVE-2025-7828 - "WordPress WP Filter Combine RSS Feeds Unauthenticated Data Deletion Vulnerability"

CVE ID : CVE-2025-7828
Published : Aug. 23, 2025, 5:15 a.m. | 1 day, 2 hours ago
Description : The WP Filter & Combine RSS Feeds plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the post_listing_page() function in all versions up to, and including, 0.4. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete feeds.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 05:15:00 GMT

CVE-2025-7642 - WordPress Simpler Checkout Plugin Authentication Bypass

CVE ID : CVE-2025-7642
Published : Aug. 23, 2025, 5:15 a.m. | 1 day, 1 hour ago
Description : The Simpler Checkout plugin for WordPress is vulnerable to Authentication Bypass in versions 0.7.0 to 1.1.9. This is due to the plugin not properly verifying a user's identity prior to logging them in as an admin through the simplerwc_woocommerce_order_created() function. This makes it possible for unauthenticated attackers to log in as other users based on their order ID, which can be an administrator if a site admin has placed a test order.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 05:15:00 GMT

CVE-2025-7821 - "WordPress WC Plus Favicon Logo Base Unauthorized Modification Vulnerability"

CVE ID : CVE-2025-7821
Published : Aug. 23, 2025, 5:15 a.m. | 1 day, 1 hour ago
Description : The WC Plus plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'pluswc_logo_favicon_logo_base' AJAX action in all versions up to, and including, 1.2.0. This makes it possible for unauthenticated attackers to update the site's favicon logo base.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 05:15:00 GMT

CVE-2025-43766 - Liferay Portal/DPX Remote Code Execution Vulnerability

CVE ID : CVE-2025-43766
Published : Aug. 23, 2025, 5:15 a.m. | 1 day ago
Description : The Liferay Portal 7.4.0 through 7.3.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows the upload of unrestricted files in the style books component that are processed within the environment enabling arbitrary code execution by attackers.
Severity: 6.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 05:15:00 GMT

CVE-2025-43764 - Liferay Portal Liferay DXP Regular Expression Denial of Service

CVE ID : CVE-2025-43764
Published : Aug. 23, 2025, 5:15 a.m. | 20 hours, 7 minutes ago
Description : Self-ReDoS (Regular expression Denial of Service) exists with Role Name search field of Kaleo Designer portlet JavaScript in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.1, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.20 and 7.4 GA through update 92, which allows authenticated users with permissions to update Kaleo Workflows to enter a malicious Regex pattern causing their browser to hang for a very long time.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 05:15:00 GMT

CVE-2025-43765 - Liferay Portal Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-43765
Published : Aug. 23, 2025, 5:15 a.m. | 20 hours, 7 minutes ago
Description : A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.13 and 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the text field from a web content.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 05:15:00 GMT

CVE-2025-43767 - Liferay Portal Open Redirect

CVE ID : CVE-2025-43767
Published : Aug. 23, 2025, 4:15 a.m. | 9 hours, 12 minutes ago
Description : Open Redirect vulnerability in /c/portal/edit_info_item parameter redirect in Liferay Portal 7.4.3.86 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.9, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 update 86 through update 92 allows an attacker to exploit this security vulnerability to redirect users to a malicious site.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 04:15:00 GMT

CVE-2025-58043 - Apache HTTP Server Unvalidated User Input

CVE ID : CVE-2025-58043
Published : Aug. 23, 2025, 3:15 a.m. | 10 hours, 13 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 03:15:00 GMT

CVE-2025-58042 - Apache HTTP Server Cross-Site Request Forgery

CVE ID : CVE-2025-58042
Published : Aug. 23, 2025, 3:15 a.m. | 9 hours, 12 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 03:15:00 GMT

CVE-2025-58041 - Apache HTTP Server Cross-Site Request Forgery

CVE ID : CVE-2025-58041
Published : Aug. 23, 2025, 3:15 a.m. | 7 hours, 54 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 03:15:00 GMT

CVE-2025-58040 - Apache HTTP Server Authentication Bypass

CVE ID : CVE-2025-58040
Published : Aug. 23, 2025, 3:15 a.m. | 6 hours, 15 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 03:15:00 GMT

CVE-2025-58039 - Apache Struts Remote Code Execution

CVE ID : CVE-2025-58039
Published : Aug. 23, 2025, 3:15 a.m. | 5 hours, 11 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 03:15:00 GMT

CVE-2025-58036 - Apache HTTP Server Unvalidated User Input

CVE ID : CVE-2025-58036
Published : Aug. 23, 2025, 3:15 a.m. | 3 hours, 54 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 03:15:00 GMT

CVE-2025-58037 - Apache Solr SQL Injection

CVE ID : CVE-2025-58037
Published : Aug. 23, 2025, 3:15 a.m. | 3 hours, 54 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 03:15:00 GMT

CVE-2025-58038 - Apache Struts Command Injection

CVE ID : CVE-2025-58038
Published : Aug. 23, 2025, 3:15 a.m. | 3 hours, 54 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 03:15:00 GMT

CVE-2025-43769 - Liferay Portal Liferay DXP Stored Cross-Site Scripting (XSS) Vulnerability

CVE ID : CVE-2025-43769
Published : Aug. 23, 2025, 3:15 a.m. | 3 hours, 11 minutes ago
Description : Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows remote attackers to execute arbitrary web script or HTML via components tab.
Severity: 4.6 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 03:15:00 GMT

CVE-2025-58035 - Apache HTTP Server Unvalidated User Input

CVE ID : CVE-2025-58035
Published : Aug. 23, 2025, 3:15 a.m. | 3 hours, 11 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 03:15:00 GMT

CVE-2025-22860 - Norton Antivirus Unvalidated Redirect to Arbitrary URL

CVE ID : CVE-2025-22860
Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 54 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 03:15:00 GMT

CVE-2025-22861 - Apache Struts Command Injection

CVE ID : CVE-2025-22861
Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 54 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 03:15:00 GMT

CVE-2025-22863 - Apache HTTP Server Cross-Site Request Forgery

CVE ID : CVE-2025-22863
Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 54 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 03:15:00 GMT

CVE-2025-22864 - Apache HTTP Server Command Injection

CVE ID : CVE-2025-22864
Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 54 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 03:15:00 GMT

CVE-2025-24468 - Apache HTTP Server Cross-Site Request Forgery

CVE ID : CVE-2025-24468
Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 54 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 03:15:00 GMT

CVE-2025-24469 - Apache HTTP Server Unvalidated User Input

CVE ID : CVE-2025-24469
Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 54 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 03:15:00 GMT

CVE-2025-43768 - Liferay Portal Unauthenticated Admin Data Disclosure

CVE ID : CVE-2025-43768
Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 54 minutes ago
Description : Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows authenticated users without any permissions to access sensitive information of admin users using JSONWS APIs.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 03:15:00 GMT

CVE-2025-43770 - Liferay Portal Liferay DXP Reflected Cross-Site Scripting (XSS)

CVE ID : CVE-2025-43770
Published : Aug. 23, 2025, 2:15 a.m. | 2 hours, 54 minutes ago
Description : A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.3, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the referer or FORWARD_URL using %00 in those parameters.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sat, 23 Aug 2025 02:15:00 GMT

CVE-2025-8193 - "Apache HTTP Server Information Disclosure Vulnerability"

CVE ID : CVE-2025-8193
Published : Aug. 22, 2025, 11:15 p.m. | 5 hours, 54 minutes ago
Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 22 Aug 2025 23:15:00 GMT

CVE-2025-52450 - "Tableau Server Path Traversal"

CVE ID : CVE-2025-52450
Published : Aug. 22, 2025, 9:15 p.m. | 7 hours, 54 minutes ago
Description : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (abdoc api - create-data-source-from-file-upload modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 22 Aug 2025 21:15:00 GMT

CVE-2025-52451 - "Salesforce Tableau Server Absolute Path Traversal Vulnerability"

CVE ID : CVE-2025-52451
Published : Aug. 22, 2025, 9:15 p.m. | 7 hours, 54 minutes ago
Description : Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - create-data-source-from-file-upload modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Severity: 8.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 22 Aug 2025 21:15:00 GMT

CVE-2025-55455 - DooTask Authenticated Arbitrary Download Vulnerability

CVE ID : CVE-2025-55455
Published : Aug. 22, 2025, 9:15 p.m. | 7 hours, 54 minutes ago
Description : DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 22 Aug 2025 21:15:00 GMT

CVE-2025-9355 - Linksys Wireless Router Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-9355
Published : Aug. 22, 2025, 9:15 p.m. | 7 hours, 54 minutes ago
Description : A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this vulnerability is the function scheduleAdd of the file /goform/scheduleAdd. Performing manipulation of the argument ruleName results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 9.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 22 Aug 2025 21:15:00 GMT

CVE-2025-9356 - "Linksys Wireless Router Stack-Based Buffer Overflow Vulnerability"

CVE ID : CVE-2025-9356
Published : Aug. 22, 2025, 9:15 p.m. | 7 hours, 54 minutes ago
Description : A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this issue is the function inboundFilterAdd of the file /goform/inboundFilterAdd. Executing manipulation of the argument ruleName can lead to stack-based buffer overflow. The attack may be performed from a remote location. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 9.0 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 22 Aug 2025 21:15:00 GMT

CVE-2022-45133 - Mahara XML Font Font Traversal Code Execution Vulnerability

CVE ID : CVE-2022-45133
Published : Aug. 22, 2025, 9:15 p.m. | 5 hours, 54 minutes ago
Description : Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font upload for skins. A particularly structured XML file could allow one to traverse the server to obtain access to secure files or cause code execution based on the payload.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 22 Aug 2025 21:15:00 GMT

CVE-2025-26496 - Tableau Type Confusion Local Code Inclusion Vulnerability

CVE ID : CVE-2025-26496
Published : Aug. 22, 2025, 9:15 p.m. | 5 hours, 54 minutes ago
Description : Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau Server, Tableau Desktop on Windows, Linux (File Upload modules) allows Local Code Inclusion.This issue affects Tableau Server, Tableau Desktop: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Severity: 9.6 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 22 Aug 2025 21:15:00 GMT

CVE-2025-26497 - Tableau Server Absolute Path Traversal Vulnerability

CVE ID : CVE-2025-26497
Published : Aug. 22, 2025, 9:15 p.m. | 5 hours, 54 minutes ago
Description : Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 22 Aug 2025 21:15:00 GMT

CVE-2025-26498 - "Salesforce Tableau Server File Upload Arbitrary File Write"

CVE ID : CVE-2025-26498
Published : Aug. 22, 2025, 9:15 p.m. | 5 hours, 54 minutes ago
Description : Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (establish-connection-no-undo modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 22 Aug 2025 21:15:00 GMT

CVE-2025-43761 - Liferay Portal and DXP Reflected Cross-Site Scripting (XSS)

CVE ID : CVE-2025-43761
Published : Aug. 22, 2025, 9:15 p.m. | 5 hours, 54 minutes ago
Description : A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.4, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the frontend-editor-ckeditor-web/ckeditor/samples/old/ajax.html path
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 22 Aug 2025 21:15:00 GMT

CVE-2025-4609 - Google Chrome Mojo Sandbox Escape

CVE ID : CVE-2025-4609
Published : Aug. 22, 2025, 9:15 p.m. | 5 hours, 54 minutes ago
Description : Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 136.0.7103.113 allowed a remote attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 22 Aug 2025 21:15:00 GMT

CVE-2022-31491 - Voltronic Power Remote Code Execution

CVE ID : CVE-2022-31491
Published : Aug. 22, 2025, 8:15 p.m. | 6 hours, 54 minutes ago
Description : Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote attacker to run arbitrary code via an unspecified web interface related to detection of a managed UPS shutting down. An unauthenticated attacker can use this to run arbitrary code immediately regardless of any managed UPS state or presence.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 22 Aug 2025 20:15:00 GMT

CVE-2022-43110 - Voltronic Power ViewPower and PowerShield Netguard Unauthenticated Remote Command Execution

CVE ID : CVE-2022-43110
Published : Aug. 22, 2025, 8:15 p.m. | 6 hours, 54 minutes ago
Description : Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via an unspecified web interface. An unauthenticated remote attacker can make changes to the system including: changing the web interface admin password, view/change system configuration, enumerate connected UPS devices and shut down connected UPS devices. This extends to being able to configure operating system commands that should run if the system detects a connected UPS shutting down.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Fri, 22 Aug 2025 20:15:00 GMT

CVE-2025-57801 - Gnark EdDSA/ECDSA Signature Malleability

CVE ID : CVE-2025-57801
Published : Aug. 22, 2025, 8:15 p.m. | 6 hours, 54 minutes ago
Description : gnark is a zero-knowledge proof system framework. In versions prior to 0.14.0, the Verify function in eddsa.go and ecdsa.go used the S value from a signature without asserting that 0 ≤ S < order, leading to a signature malleability vulnerability. Because gnark’s native EdDSA and ECDSA circuits lack essential constraints, multiple distinct witnesses can satisfy the same public inputs. In protocols where nullifiers or anti-replay checks are derived from R and S, this enables signature malleability and may allow double spending. This issue has been addressed in version 0.14.0.
Severity: 8.6 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...